Have you looked at this option in squid.conf?
#Default:
# authenticate_ttl 1 hour
# TAG: authenticate_ip_ttl
# With this option you control how long a proxy authentication
# will be bound to a specific IP address. If a request using
# the same user name is received during this time then access
# will be denied and both users are required to reauthenticate
# them selves. The idea behind this is to make it annoying
# for people to share their password to their friends, but
# yet allow a dialup user to reconnect on a different dialup
# port.
#
# The default is 0 to disable the check. Recommended value
# if you have dialup users are no more than 60 seconds to allow
# the user to redial without hassle. If all your users are
# stationary then higher values may be used.
#
# See also authenticate_ip_ttl_is_strict
#
-Mike
On Fri, 7 Dec 2001 djohnston@rentokil.com wrote:
> Hi squid experts,
>
> I have a feeling this question has been asked before, so I
> appologise - I'm new to this list and have not yet found a solution.
>
> My company is having a small head-ache with a squid related
> problem. We'd like to give squid users authentication passwords.
> But we don't want a user to be able to 'lend' their password to
> somebody else. Basically has anyone ever found a way to make
> sure that a user is only logged on to one terminal when browsing
> the web? We can't restrict each user to one ip because of roaming
> users and the like, but we'd like to 'time-out' a user if it seems they
> are accesing squid from >1 terminal.
>
> I'd be very interested in any thoughts or experiences..
>
>
>
> --
> Daniel Johnston
> Technical Developer
> Corporate IT - Rentokil Initial plc
>
> Tel: +44 (0) 1342 327171 ext 248
>
> _____________________________________________________________________
> This message has been checked for all known viruses by
> MessageLabs on behalf of Rentokil Initial plc
>
>
Received on Fri Dec 07 2001 - 10:37:10 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:16 MST