I am trying to get my users to Authenticate locally via ldap and also
authenticate at an upstream proxy.
I can get it to work on either, but not both together so that it
authenticates first local then upstream
we are connected to the upstream proxy via a VPN,
I think the problem is in the "never_direct/always_direct" because when
I change these around this is when I can get one of the
authentifications to work
Lret me know ifd you need more info
Any Help appreciated
here is my current config
cache_peer proxy.edu.au parent 3128 0 no-query default
debug_options ALL,2 28,9
redirect_program /usr/local/bin/squidGuard
redirect_children 8
redirect_rewrites_host_header off
authenticate_program /usr/bin/smb_auth -W STUDENT -U 10.0.4.4
authenticate_children 8
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl cache dst 10.130.144.11/255.255.254.0
acl localsrv src 10.0.4.1-10.0.4.20/255.255.254.0
acl localauth proxy_auth REQUIRED
acl virus_path urlpath_regex -i \.eml$
acl virus_url url_regex -i \.eml$
acl restricted_files urlpath_regex \.exe$ \.com$ \.mpg$ \.mp3$ \.mpeg$
\.avi$ \.mov$ \.qt$ \.qtr$ \.qtx$ \.scr$
acl restricted_users src 10.0.4.21-10.0.5.251/255.255.254.0
http_access allow cache
http_access allow localhost
http_access allow localsrv
http_access allow localauth
http_access allow student
http_access deny virus_path
http_access deny virus_url
http_access deny restricted_users restricted_files
http_access deny all
icp_access allow all
proxy_auth_realm St Joseph's College Internal Authentication
always_direct allow cache
always_direct allow localauth
always_direct allow localsrv
always_direct allow student
always_direct deny all
Andrew Loughnan
Computer Services Manager
St Joseph's College
135 Aphrasia St
Geelong Victoria 3220
Australia
Ph: (03) 5221-8100
DD: (03) 5226-8165
Fax (03) 5221-6983
E-mail: andrewl@sjc.vic.edu.au <mailto:andrewl@sjc.vic.edu.au>
WWW: <http://www.sjc.vic.edu.au>
Received on Mon Dec 03 2001 - 06:23:15 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:09 MST