Il giorno mer, 28-06-2006 alle 14:39 +0200, davide ha scritto:
> Il giorno mer, 28-06-2006 alle 16:29 +0530, Visolve Squid ha scritto:
> > davide.ferrante@fastwebnet.it wrote:
> >
> > > Hello,
> > > i use squid with ncsa_auth to identify my users, but i have a problem
> > > whith the accounts;
> > > how to prevent users to connect themselves on different machines
> > > with the same account at the same time?
> > > I don't know if i was clear.... I've tried to use at the same
> > > time the same accounts on different machine and it was possible. I
> > > need to prevent it, because postal police couldn't believe in ubiquity..
> >
> > Hello Davide,
> >
> > You can try with "acl aclname max_user_ip [-s] number" directive in
> > squid.conf.
>
> I tried but nothing seems to be changed...
> May it depends on the position of acl in the acl section?
> Or maybe on the position of the relative http_access string?
> Thanks, i'll try again...i'm posting my acl and http_access sections,
> anyway..
>
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 563 # https, snews
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl onlyonce max_user_ip 1
> acl no_exe urlpath_regex \.[eE][xX][eE]
> acl gator browser Gator/5.0
> acl baobaristi src 127.0.0.1
> acl password proxy_auth REQUIRED
>
>
> http_access deny onlyonce
> http_access deny no_exe
> http_access allow password
> http_access allow baobaristi
> http_access deny gator
Wow, i found something...
I had the authenticate_ip_ttl set to 0 and it would means that squid
couldn't remember user's ip. So i changed it setting to 30 minutes, and
something happened; initially squid refuses request from the same user
on different machine but if i try again it keeps connecting without
problems..
Why? maybe something related to the .auth_param basic children 5.
string?
Thanks, by
Davide
Received on Wed Jun 28 2006 - 06:55:49 MDT
This archive was generated by hypermail pre-2.1.9 : Sat Jul 01 2006 - 12:00:02 MDT