Hi
I,m using squid + windows 2000 + smb_auth for authenticating Windows domain
users. Now only user authentication is happening .Can I do both user as
well as IP
address authentication.
Scenario: User A having the IP address 10.10.10.1 can access proxy only
from his system and he cannot another system with different IP address.
I just need logic of the ACL to be given ,bcoz as the acl is getting
executed line by line my objective is not getting resolved.
squid.conf file is pasted below for reference .Squid version 2.4Stable7
,Redhat 8.0 , samba 3.0.
http_port 80
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl CONNECT method CONNECT
acl denied_sites dstdomain gotomypc.com gator.com
acl IDM src 172.20.128.96/255.255.255.255
authenticate_program /usr/local/squid2.4NEW/libexec/squid/smb_auth -W
TCSAMB
acl domainusers proxy_auth REQUIRED
http_access allow domainusers
http_access deny denied_sites
http_access deny IDM
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
icp_access allow all
cache_effective_user squid
cache_effective_group squid
Rgds
AZad A
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:20:31 MST