Covington, Chris wrote:

Hi all,

I've got an NTLM Group deny working:

external_acl_type ntlm_group ttl=0 concurrency=5 %LOGIN
/usr/lib/squid/wbinfo_group.pl
acl NTLMNoAccess external ntlm_group Internet_Access_None
http_access deny NTLMNoAccess
http_reply_access deny NTLMNoAccess

The issue is that when a user is a member of Internet_Access_None, they get prompted to login rather than just seeing the ERR_CACHE_ACCESS_DENIED (ERR_ACCESS_DENIED?) page. How can I setup an
outright deny when a member is in Internet_Access_None?

If I remember correctly, if Squid denies access due to a proxy_auth ACL, it will prompt for different credentials. Changing your http_access line to...

http_access deny NTLMNoAccess all

...should clear this up.   I think.

thanks
---
Chris Covington
IT
Plus One Health Management
75 Maiden Lane Suite 801
NY, NY 10038
646-312-6269
http://www.plusoneactive.com
Chris

Reply via email to