On Thu, 29 Apr 2004, Zasp wrote:

> I have already noticed that helper. It works fine. But if we combine the
> two into one step, the performance may be higher.

Very marginal. The overhead of ipuser acls is nearly nil.

> That is, user can be authenticated after Squid accesses only one time
> the user database such as LDAP or Mysql which contains users' passwrod,
> credential, IP and other information. Of course, its possible side
> effect is to disturb modular programming, I think.

In case of LDAP you would still need two accesses. One to verify the 
password (login to LDAP), one to check if the IP is allowed.

Regards
Henrik


Reply via email to