Re: [SQU] Squid-2.3.STABLE4 w/ Linux 2.2.13 - getting proxy_auth and transparent proxying to work together

They will not work together. Transparent web caches cannot work with
authentication (Robert mentioned a few days ago, in response to one of
the many many many times this question has been asked, that there may be
a trick for Windows IE clients to work this way...but I don't know it,
and I haven't heard that he's figured it out either).

When operating transparently there is only one spot in the headers for
authentication to go, and if the proxy is using it, then origin sites
can't. And vice versa. Something's got to give, so it don't work.

Speaking of frequently asked questions...is this not on the list? I did
a quick check just now (easier to provide a link than an explanation),
but didn't see it under auth or transparency, in my cursory glance.

Santosh Narayanan wrote:

> Hi,
>
> I'm working on a proxy server using squid-2.3.STABLE4 with Linux 2.2.13
> (Slackware). I've been trying to get the proxy_auth feature (using
> ncsa_auth) working with transparent proxying.
>
> What happens is this:
>
> When I enable transparent proxying on the server the browser shows a
> authentication dialog box and accepts the username and password. However
> even on giving the right username/password it just keeps showing the
> authentication box.
>
> When I disable transparent proxying on the server and set the proxy
> server address manually in my browser settings the authentication works
> fine.
>
> Now I read a post in the squid-users list archives
> (http://www.squid-cache.org/mail-archive/squid-users/199810/0204.html)
> that asked to change HDR_PROXY_AUTHENTICATE in src/client_side.c to
> HDR_WWW_AUTHENTICATE etc - but the squid-2.3.STABLE4 source doesn't have a
> HDR_PROXY_AUTHENTICATE in the client_side.c file.
>
> I would really appreciate if anyone could give me a pointer as to how I
> can use the proxy_auth along with transparent proxying?
>
> Thanks!
> -- Santosh

                                   --
                      Joe Cooper <joe@swelltech.com>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html