Re: [squid-users] Authenticating users with a webpage form

You misunderstand how it works.

The browser pops up that box to gather authentication credentials it
then uses for all subsequent connections to the proxy server.

Using a login page won't magically place authentication credentials
in the web browser for it to then use for subsequent connections.
The proxy has to track which IP addresses have had users log
and then pass them through.

This has security implications which noone really seems to care about...

Adrian

On Sun, Dec 02, 2007, Taylor Jones wrote:
> Thanks for the offer, but I'm not looking for a way to login, I'm
> looking for a way to change the way in which squid lets users log in.
> As you know, the user authenticates himself via a little pop-up box in
> his browser. This is fine for most people, but like I said, I'm
> slightly obsessive, and I would like to design my own webpage through
> which the users log in. I could write the actual login script myself
> and implement it with LDAP or MySQL or something like that, but I
> can't figure out how to make squid show a login page instead of a
> login box.
>
>
> > On Dec 1, 2007 10:08 PM, Amos Jeffries <squid3@treenet.co.nz> wrote:
> > >
> > > Taylor Jones wrote:
> > > > Hello,
> > > >
> > > > I read the guidelines for this mailing list, and I really do hope I'm
> > > > not asking a question you've all heard a million times. If I am, feel
> > > > free to berate me, I probably deserve it.
> > > >
> > > > I am looking for a way to use a webpage with a GET/POST form to get
> > > > the user's name and password for authentication instead of the pop-up
> > > > that the user receives by default. I realize that this is just an
> > > > aesthetic kind of thing, but I'm nothing if not obsessive, and I hate
> > > > that I can't tell a user where he is and what he needs to do to gain
> > > > access to our proxy server. Honestly, this shouldn't be that hard to
> > > > implement, I just don't really know where I should start. Any help you
> > > > guys could give me would be much appreciated!
> > >
> > > I'm happy to supply a system.
> > > http://treenet.co.nz/projects/
> > >
> > > The web login code is freeware. The server and proxy integration is not.
> > > If you are interested get in touch off-list and we can discuss the price
> > > for that part.
> > >
> > > Amos Jeffries
> > > --
> > > amos@treenet.co.nz
> > > Treehouse Networks Ltd.
> > > +64 21 293 4049
> > >
> >

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -