[squid-users] acl aclname ident_regex REQUIRED

From: Jarrod Harch <[email protected]>
Date: Mon, 11 Nov 2002 12:06:50 +1000

Hi,

I'm having problems getting the ident_regex option to work with the REQUIRED
keyword. I'm running Squid 2.4.STABLE6. I had no problems in setting up
squid to do ident lookups. Now I want to refuse access for clients that
don't respond to ident, but the acl entry is returning false for all
requests.

I adjusted the log level for acls, as per the FAQ. I can see that a lookup
is happening for these requests and a valid ident response is returned.
Squid decides that it doesn't match REQUIRED and based on that will refuse
the request, even though it is valid.

here's an extract from cache.log with an acl entry I'm using for testing
this
....

2002/11/11 11:58:27| aclCheck: checking 'http_access allow jharch
ident_users'
2002/11/11 11:58:27| aclMatchAclList: checking jharch
2002/11/11 11:58:27| aclMatchAcl: checking 'acl jharch src 172.16.1.157'
2002/11/11 11:58:27| aclMatchIp: '172.16.1.157' found
2002/11/11 11:58:27| aclMatchAclList: checking ident_users
2002/11/11 11:58:27| aclMatchAcl: checking 'acl ident_users ident_regex
REQUIRED'
2002/11/11 11:58:27| aclMatchRegex: checking 'Jarrod Harch'
2002/11/11 11:58:27| aclMatchRegex: looking for 'REQUIRED'
2002/11/11 11:58:27| aclMatchAclList: returning 0

....

Any ideas?

RECIPIENTS ARE REMINDED THAT THIS E-MAIL MESSAGE
IS STRICTLY CONFIDENTIAL AND INTENDED ONLY FOR USE
BY THE ADDRESSEE UNLESS OTHERWISE INDICATED.

Investment Data Technologies Pty Ltd advise that they:
- accept no liability for any abusive, defamatory, obscene, illegal, or
offensive material contained in this e-mail message
- do not monitor the content of any e-mail messages sent from
Investment Data Technologies
- do not authorise or condone the sending of abusive, defamatory,
obscene, illegal, or offensive material by their employees and contractors
- cannot guarantee that this e-mail message is secure and will not be
intercepted by a third party.
Received on Sun Nov 10 2002 - 19:06:50 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:16 MST