[squid-users] Problem with the Squid 3

Amos Jeffries squid3 at treenet.co.nz
Mon Aug 8 21:29:50 UTC 2016


On 9/08/2016 9:22 a.m., Marcio Demetrio Bacci wrote:
> I have a problem with Squid 3 on Debian 8.2
> 
> When the users open your browsers, the squid asks the name and password.
> Until this moment is OK, but if the users inform only the password (field
> "name" not filled - in blank), the navigation is permitted.
> 

Your config uses credentails to *allow* things, but there is no denial
for invalid auth credentials so unless one of the other non-auth ACL
tests denies the request there is no reason to prevent access.

Amos



More information about the squid-users mailing list