Re: [squid-users] http_accel mode authentication ??

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 19 Sep 2001 07:45:16 +0200

vwake_s@sify.com wrote:

> The entire setup is fine as long as I configure my browser with my
> proxy details. But I have 500+ users and trying to manually change
> the browser setting will be killing. The only option ( i guess ?) is
> to intercept and proxy

Not an option if you want authentication of your users. HTTP only
defines proxy authentication when the browser is using a proxy which it
isn't when you are having the proxy "magically" intercept the traffic,
claiming to be the origin server.

I assume you did not notice the small warning in squid.conf?

          # WARNING: proxy_auth can't be used in a transparent proxy. It
          # collides with any authentication done by origin servers. It
may
          # seem like it works at first, but it doesn't.

> If I turn on http_accel proxy does not authenticate, If I dont turn it on I cant
> intercept port 80 requests.

Authentication is only possible on proxied or acceleratd traffic, not
intercepted traffic.

If you enable httpd_accel_with_proxy then Squid can be used both in
proxy and interception mode. But it won't help you getting intercepted
traffic authenticated.

--
Henrik Nordstrom
Squid Hacker
Received on Tue Sep 18 2001 - 23:48:01 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:16 MST