RE: [squid-users] acl ident_regex

From: Rick Matthews <k5wls@dont-contact.us>
Date: Fri, 25 Jul 2003 13:19:31 -0500

> Sorry, but no there is no such field type in the ident protocol.

My bad; I read it wrong. The two response types are "USERID" and
"ERROR". As you have mentioned, "OTHER" is an operating system
type within the USERID response. What I was trying to point out
was that there should be no reason why he couldn't return the
hostname. If it happens that his hostnames do not conform to the
rules of the operating system, he can use the OTHER operating system
type and remain in compliance.

One other point that I was hinting about... Even his non-technical
users can easily make the ident reply be anything *they* want it to
be, too.

Thanks,
Rick

> -----Original Message-----
> From: Henrik Nordstrom [mailto:hno@squid-cache.org]
> Sent: Friday, July 25, 2003 12:52 PM
> To: Rick Matthews
> Cc: Chris Wilcox; squid-users@squid-cache.org
> Subject: RE: [squid-users] acl ident_regex
>
>
> fre 2003-07-25 klockan 18.42 skrev Rick Matthews:
>
> > <http://identd.dyndns.org/identd/rfc1413.txt>, in addition to the
> > response type USERID, there is an additional type "OTHER":
>
> Sorry, but no there is no such field type in the ident protocol.
>
> OTHER is a operating system type and indicates that the username which
> follows is not structured according to any standard operating system
> rules, and probably not meant to be human readable.
>
> There can only be one username in the same ident reply.
>
> In all operating system types you are allowed to return pretty much
> anything as username, but if the operating system type is anything else
> than OTHER then the returned username SHOULD follow the rules of that
> operating system.
>
> It is perfectly fine if you set your ident server to return the hostname
> as userid, if this is what you wishes to make your users identify
> themselves as to the network (using ident).
>
> Squid will use whatever is sent as user ident in the reply, ignoring the
> opsys field.
>
> Regards
> Henrik
>
> --
> Donations welcome if you consider my Free Squid support helpful.
> https://www.paypal.com/xclick/business=hno%40squid-cache.org
>
> Please consult the Squid FAQ and other available documentation before
> asking Squid questions, and use the squid-users mailing-list when no
> answer can be found. Private support questions is only answered
> for a fee or as part of a commercial Squid support contract.
>
> If you need commercial Squid support or cost effective Squid and
> firewall appliances please refer to MARA Systems AB, Sweden
> http://www.marasystems.com/, info@marasystems.com
>
Received on Fri Jul 25 2003 - 12:19:49 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:18:17 MST