i install squid server with ldap SSO authentication, its works good.
i want to deny web access for some user by specify username, for example deny user "bad_user" web access.
here is my authentication section in squid.conf
# START AUTHENTICATION
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
#auth_param ntlm max_challenge_reuses 0
#auth_param ntlm max_challenge_lifetime 2 minutes
#auth_param ntlm use_ntlm_negotiate off
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Domain Proxy Server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
authenticate_cache_garbage_interval 10 seconds
# Credentials past their TTL are removed from memory
authenticate_ttl 0 seconds
acl AuthorizedUsers proxy_auth REQUIRED
acl for_inet_users proxy_auth REQUIRED
i test proxy_auth by these method, but require username and password and dost open webpage
acl bad proxy_auth bad_user
http_access deny bad