[squid-users] Question about: ext_session_acl Splash/Portal solution.

[Klaus Tachtler]

Hi,

i have a running squid and I would like to show a splash screen and  
did following configuration:


--- code snipped ---
external_acl_type session concurrency=100 ttl=12000 negative_ttl=0  
children=1 %LOGIN /usr/lib64/squid/ext_session_acl -a -T 12000 -b  
/var/lib/squid/sessions/

acl session_login external session LOGIN

external_acl_type session_active_def concurrency=100 ttl=12000  
negative_ttl=0 children-max=1 %LOGIN /usr/lib64/squid/ext_session_acl  
-a -T 12000 -b /var/lib/squid/sessions/

acl session_is_active external session_active_def

acl clicked_login_url url_regex -i http://my.page.net/accept.php

http_access allow clicked_login_url session_login

http_access deny !session_is_active

deny_info http://my.page.net/splash.php?url=%u session_is_active
--- code snipped ---


After user authentication against ldap and enter the URL google.de the  
http://my.page.net/splash.php?url=%u will be shown, no problem to this  
point.

BUT, after reaching the http://my.page.net/accept.php (by pressing a  
button on the splash page) the splash page comes over and over again.

The /var/log/squid/access.log will show me that:

--- log ---

1507908437.361      1 192.168.0.10 TCP_DENIED/302 448 GET  
http://google.de/ username HIER_NONE/- text/html

--- log ---

Why I'm on a loop between splash page and accept page?

Thank you for any help!
Klaus.


-- 

------------------------------------------
e-Mail  : klaus at tachtler.net
Homepage: http://www.tachtler.net
DokuWiki: http://www.dokuwiki.tachtler.net
------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-keys
Size: 3120 bytes
Desc: Öffentlicher PGP-Schlüssel
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20171013/b2f0d502/attachment.key>