On 19/07/18 03:41, Victor Sudakov wrote: > > If there were an option to debug which "http_access" line rejects him > I could try it. > Please try: debug_options ALL,1 28,5 ... and have them login. Your cache.log should then list the ACLs being tested and what their results are. Amos