On Fri, 5 Mar 1999 19:16:53 +1300 (NZDT) David Zanetti
<[EMAIL PROTECTED]> wrote:
> On Fri, 5 Mar 1999, Steven Sporen wrote:
>
> > Does squid re-authenticate (using proxy_auth) at regular intervals?
> > Could I implement a time bassed access system on squid? It
> > looks to me like once a user has authenticated then the user is
> > granted access.
>
> [squid.conf]
> # TAG: authenticate_ttl
> # The time a checked username/password combination remains cached
> # (default 3600). If a wrong password is given for a cached user,
> # the user gets removed from the username/password cache forcing
> # a revalidation.
> #
> #authenticate_ttl 3600
I think that's different, isn't it... doesn't that just let squid cache
the results of the authenticate_program?
I believe the username/password is resent with each HTTP method, so
effectively the user is reauthenticated (based on all the 'acl' rules)
when each object is fetched, data sent, etc.
- Bob
----------------------------------------------------------------------------
The Day Today ... because FACT times IMPORTANCE equals NEWS!
----------------------------------------------------------------------------
Bob "Mince" Franklin ~{], CNE ;), MCSE ;) Tel. (0118) 931 8432
Systems and Communications Fax. (0118) 975 3094
IT Services [EMAIL PROTECTED]
University of Reading, U.K. http://www.reading.ac.uk/~suq96rcf/
----------------------------------------------------------------------------
