[squid-users] What happens when duplicate external_acl_type are mentioned

[Amos Jeffries]

On 2/12/18 12:15 am, Amish wrote:
> 
> 
> On 01/12/18 3:41 pm, Amos Jeffries wrote:
>> On 1/12/18 6:32 pm, Amish wrote:
>>> QUESTION:
>>> ----------
>>>
>>> Effectively squid.conf now has two external_acl_type lines with same
>>> name. (ipuser)
>>>
>>> First one has %ul and other one does not.
>>>
>>>  From my tests - first one gets the priority and second one is
>>> ignored by
>>> squid.
>>>
>>> So my questions are:
>>> 1) Can I assume this to be always true?
>> Now that you have found the lack of error message on startup one will be
>> added. It has not been a serious problem, so we are unlikely to make it
>> more than an ERROR message and explicitly ignore the second (time will
>> tell tough).
> 
> Thank you for your quick response.
> 
> So if I pass %ul to external_acl_type, but dont use any auth_param,
> squid dies with an error.
> 
> "Can't use proxy auth because no authentication schemes are fully
> configured"
> 
> Is it possible for squid to not to die but instead warn and then just
> pass "-" (dash) for %ul?

The %ul code will generate an auth challenge exchange if no username is
available. So the auth system must be setup with parameters to use in
that challenge.

Use %un for when username is optional.

Amos