[squid-users] proxy_auth question

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi list,

I have a question regarding proxy_auth, I hope you guys can point me
to where I am doing things wrong.

My issue is, if I use the following:

acl password proxy_auth /usr/local/squid/etc/limited
http_access deny password

and /usr/local/squid/etc/limited contains the value
"kenneth" (without the quotes"), I am still allowed http access if i type
kenneth as my user name.

but if i use:
acl password proxy_auth kenneth
http_access deny password

it works, user kenneth is denied http access.

So, is it possible for proxy_auth to get the username on a file?

Below is my complete squid.conf
- ---

cache_peer xx.xx.xx.xx parent 8080 0 no-query proxy-only default
http_port 3128

cache_effective_user squid
cache_effective_group squid

cache_mgr postmaster@f00.org

cache_dir null /tmp

auth_param basic program /usr/local/squid/libexec/ncsa_auth
/usr/local/squid/etc/squidusers
auth_param basic children 5
auth_param basic realm DEVELOPMENT SERVER [ >:) ]
auth_param basic credentialsttl 2 hours

acl password proxy_auth /usr/local/squid/etc/limited
acl test src 10.87.4.2/255.255.255.255

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT

never_direct allow all
http_access deny password
http_access allow all
- --

thanks and best regards,

- --

Kenneth P. Oncinian
Panasonic Communications Philippines Corporation
Information Systems Division - Network and Infrastructure Department
- --
PGP Public Key: http://m.1asphost.com/koncinian/koncinian.gnupg.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFECTbb9MTaiXoaMBgRAkI/AJ4sW0UYib4Hu1xmX/WnYTHjLtQuZACfalsm
UoZp8eZb+OreJJ6WiFhhgsM=
=/KN/
-----END PGP SIGNATURE-----
Received on Fri Mar 03 2006 - 23:43:12 MST