LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   auth_param Squid asking to much (https://www.linuxquestions.org/questions/linux-software-2/auth_param-squid-asking-to-much-546410/)

saavik 04-16-2007 03:36 AM

auth_param Squid asking to much
 
Hello!

We have auth_param working without problems.

squid.conf:

Quote:

auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/user
auth_param basic children 5
auth_param basic realm XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
auth_param basic credentialsttl 2 hours
acl POWERUSER proxy_auth "/usr/local/squid/user"
acl POWERUSER proxy_auth REQUIRED

But I also have useres which are no poweruser and should have access to a site for telefonnumbers. The Problem is that this site has a whole bunch of sublinks leading to Banner pages (as the finance about this clicks).

The problem is that users that are not auth. and in the poweruser group get a loginpage for each of the banners as they come not from that site.

So the internatpage A.html is free to access for everybody but on that site are a lot of sublinks eg. B.html, C.html, D.html. If the user is not in the poweruser group for each of the linked sites a loginwindow is opened. How can i change that, so that the user only gets a login window once each session ?

Thanks

saavik 04-17-2007 08:54 AM

push

no one ?

runnerfrog 04-19-2007 12:01 AM

Saavik, many things are not clear there, too many for anyone to answer clearly. My strong guess is that your squid.conf is wrong at some point (not visible at your quote). Unfortunately you are so unclear, that your /usr/local/squid/user file can be the problem too.
Just a guess because it is very hard answering something with this available data. Your post doesn't show any differences between the powerusers group and any other group. Be clear to have a clear answer, and I can give a little try, with my little time.

saavik 04-19-2007 01:06 AM

Well
 
Ok, so I`ll do my very best....


1. We have added the auth_mod to squid so that user CAN auth. by name and password
2. We also have a whitelist with http adresses which are free for access for anybody WITHOUT auth. needed
3. If a user wants to access a site which is not listed in the whitelist he MUST auth to squid and than he can access ANY site on the internet.

So it looks like in the squid.conf

Quote:

#AUTH
auth_param basic program /usr/local/squid/libexec/ncsa_auth /usr/local/squid/user
auth_param basic children 5
auth_param basic realm XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
auth_param basic credentialsttl 2 hours
acl POWERUSER proxy_auth "/usr/local/squid/user"
acl POWERUSER proxy_auth REQUIRED


acl whitelist url_regex "/usr/local/squid/whitelist"
acl blacklist url_regex "/usr/local/squid/blacklist"

http_access allow whitelist
http_access allow POWERUSER
http_access deny blacklist
So my problem is that if there is a site a.html which is in the whitelist but this site includes a link in a frame to the site b.html, you get the login window.

If this would only be once it would not be a big thing, but some site have 5-10 links and thats really not so nice.


All times are GMT -5. The time now is 04:01 PM.