two squid listeners using one configuration?

Alexander Dalloz alexander.dalloz at uni-bielefeld.de
Mon Oct 4 16:28:55 UTC 2004


Am Mo, den 04.10.2004 schrieb Richard Duran um 17:57:

> Isn't the fact that they are being identified as "specific users" a form
> of authentication (requiring a login at some point)?
> 
> -richard

If you want to identify legitimate users there is not way around using
an authentication. Personal permissions are bound to auth data.

If you have specific hosts in the net from where users can use specific
content, then you can set that up with ACLs.

Wouldn't be a way to go, to configure the Squid a a tranparent proxy. If
the user authenticates himself with a given user ID he can reach all
sites (as far as permitted) but when he can only auth with a anonymous
ID the surfer is strictly limited to the desired pages. This can be
realized with the auth mechanisms Squid offers. If using PAM you could
create anonymous logins without the need for a password and due to the
transparency of the proxy they are limited. 

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG key 1024D/ED695653 1999-07-13
Fedora GNU/Linux Core 2 (Tettnang) kernel 2.6.8-1.521smp 
Serendipity 18:17:05 up 4 days, 20:43, load average: 0.71, 0.86, 0.81 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041004/7d5fad49/attachment-0001.sig>


More information about the fedora-list mailing list