RE: [squid-users] how to force acceptance of usage policy?

I have plans for squid to allow this, other folk have requested it in
the past. Unfortunately commercial commitments keep me from doing this
at the moment. If your company is interested in sponsoring the
development, let me know.

The basic idea is that when the user authenticates, if they are not in
the user cache they get redirected on their first request to your policy
page. Variations on that are possible.

Rob

> -----Original Message-----
> From: pbdlists@pinboard.com [mailto:pbdlists@pinboard.com]
> Sent: Friday, May 17, 2002 8:31 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] how to force acceptance of usage policy?
>
>
> I'm running a cache infrastructure in a corporate environment with
> approximately 5000 users. We're not using transparent
> proxying, instead
> all the browsers are configured with the proxy details. There is a new
> requirement on the horizon that each user needs to actively accept the
> internet usage policy before being allowed to connect to the internet.
> The idea is to have something similar encountered on certiain software
> downloads or when installing software, only after you have
> accepted the
> terms you can go on.
>
> First I thought I could do this with a list of users that
> have accepted
> the policy. Those not in this list would be directed to a
> policy accept
> page on an internal webserver by way of deny_info. When the
> user clicks
> on 'accept', the webserver would add the authenticated username to the
> list of users that have accepted the policy. But there are
> two problems
> with this: for one I too often need to force a reconfigure of
> the proxy
> so it will reread the updated list and what seems even more
> of a problem
> is the fact that the user is not going to the error page specified in
> deny_info unless he cancels the authentication popup box of
> the browser;
> if he just enters his userID and password, the same popup box
> reapperas
> without any indication why, which will confuse users.
>
> Maybe I took a completely wrong approach, but at the moment I can't
> think of a different technical solution. Has anybody ever
> done something
> like this before and would be willing to share some info?
>
> Cheers,
>
> Kurt
>
Received on Thu May 16 2002 - 23:00:33 MDT