Have you made sure the ident lookup have completed?

Regards
Henrik

On Wed, 12 Nov 2003 [EMAIL PROTECTED] wrote:

> And why does it not work f�r me???????????
> 
> Version 2.5.STABLE4
> 
> Squid.conf:
> 
>        acl user_rost ident rost
>          <snip>
>        reply_body_max_size 0 allow user_rost
>        reply_body_max_size 2000000 allow all
> 
> Trying to download a file of about 100 MB gives I get the message
> ERR_TOO_BIG.
> 
> access.log shows:
> 
>   <snip>
> 
> 1068652370.557   3282 10.23.5.121 TCP_MISS/304 421 GET
> http://www.microsoft.com/products/shared/images/jump2.gif rost
> FIRST_UP_PARENT/fu0270.zff.zf-group.de image/gif
> 1068652371.608   1050 10.23.5.121 TCP_DENIED/403 1840 GET
> http://download.microsoft.com/download/win2000platform/SP/SP2/NT5/EN-US/W2KS
> P2.exe rost FIRST_UP_PARENT/fu0270.zff.zf-group.de text/html
> 
> 
> 
> 
> Mit freundlichem Gru� / regards
>  
> Werner Rost
> GM-FIR - Netzwerk
>  
> ZF Boge Elastmetall GmbH
> Friesdorfer Str. 175
> 53175 Bonn
>  
> Tel. +49 228 38 25 - 420
> Fax +49 228 38 25 - 398
> mailto:[EMAIL PROTECTED]
> www.zf.com/boge-elastmetall
>  
>  
> 
> 
> > -----Urspr�ngliche Nachricht-----
> > Von: David Landgren [mailto:[EMAIL PROTECTED] 
> > Gesendet: Mittwoch, 12. November 2003 14:51
> > An: Henrik Nordstrom
> > Cc: [EMAIL PROTECTED]
> > Betreff: Re: [squid-users] reply_body_max_size ACLs ignored? (solved)
> > 
> > 
> > Henrik Nordstrom wrote:
> > > On Tue, 4 Nov 2003, David Landgren wrote:
> > > 
> > > 
> > >>reply_body_max_size         0 allow user_davidl user_tomn
> > > 
> > > 
> > > This is a contradiction and can never be true. The same request can 
> > > not
> > > come from both users at the same time.
> > > 
> > > What you want is a single ACL listing all users in this category of 
> > > users,
> > > and then refer to this single acl in reply_body_max_size. 
> > The logics of 
> > > reply_body_max_size is idendical to that of http_access:
> > > 
> > > Squid FAQ 10.1 Access Controls Introduction 
> > > <url:http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.1>
> > 
> > Just for the record, this was indeed the problem. I'm kicking 
> > myself for 
> > not having thought about ANDing ACLs. I've changed the above to
> > 
> > reply_body_max_size         0 allow user_davidl
> > reply_body_max_size         0 allow user_tomn
> > 
> > and of course everything works correctly now. Thanks Henrik.
> > 
> > David
> > -- 
> > Commercial OS breeds commerce, whereas free OS breeds 
> > freedom, the only thing more dangerous and confusing than commerce.
> >                    -- Michael R. Jinks, redhat-list, circa 1997
> > 
> 

Reply via email to