Hi all,
 I have some config problems with proxy_auth authentication:

MY SCENARIO
-     I have 2 sets of users :allusers and priv-users.
-    I have 2 password files priv-pass and all-pass.
-    priv-pass password file is a subset of all-pass i.e priv-users are all
part of allusers
-    I want all users (allusers and priv-users) to be authenticated at all
times
-    I allusers to be denied access during ofice hours (8am - 5pm) except
they are ALSO a member of priv-users.

My config file looks like this:
.
.
auth_param basic program /usr/local/squid/libexec/ncsa_auth
"/usr/local/squid/config-dir/all-pass"
.
#all users must login
acl allusers  proxy_auth REQUIRED
http_access deny !allusers
#deny_info ERR_HOW_TO_CHANGE_PASSWORD staff-login

#always allow priviledged
acl priviledged-users proxy_auth "/usr/local/squid/config-dir/priv-pass"
http_access allow priv-users

#Disallow other users during office hours
 acl working-hours time MTWHF 08:00-17:00
http_access deny working-hours
deny_info ERR_NO_ACCESS_DURING_OFFICE_HOURS working-hours

# now allow allusers with valid logon during non-official hours
http_access allow staff-login
.
.
.
I getted the error message in "ERR_NO_ACCESS_DURING_OFFICE_HOURS "



Any help?

abdul

Reply via email to