Re: [squid-users] Fallback auth method

2014-11-14 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/11/2014 12:33 a.m., schinken wrote: > Maybe i'll try to simplify my question ;) > > > Is it possible to skip the: > >> http_access allow AllowedMemberOf all > > if auth_param basic was the authenticator (instead of the other > authentication

Re: [squid-users] Fallback auth method

2014-11-14 Thread schinken
Maybe i'll try to simplify my question ;) Is it possible to skip the: > http_access allow AllowedMemberOf all if auth_param basic was the authenticator (instead of the other authentications like NTLM/LDAP)? Condensed config: >> # basic-auth >> >> auth_param basic program /usr/lib/squid3/basi

[squid-users] Fallback auth method

2014-11-11 Thread schinken
Hi there, i'm trying to use basic_ncsa_auth as a fallback to my ntlm/kerberos and LDAP authentification. The problem here is, that even if my user is successfully authenticated by ncsa_auth, its denied by the memberof external_acl rule. Is there a way to skip this acl rule if ncsa_auth was the