Re: [squid-users] restricting ldap auth to one login at a time

ons 2006-03-15 klockan 14:55 +0300 skrev pwasenda@ura.go.ug:
> Iam considering using ldap for authenticating users, question is how do i
> prevent users from logging into the system more than once, so as to give access
> to a friend.

There is an max_user_ip acl in Squid for this specific task...

> Also is it possible to bind a username to a specific ip address.

Two options depending on if you know the IP or not:

a) The acl mentioned above can automatically lock the user to the first
IP seen for a configurable period of time.

b) You can use Squid ACLs to restrict each users to a single priorly
known IP. This is most easily done with the ip_user external acl
helper.. (see helpers/external_acl/ip_user for details)

Regards
Henrik