Re: [squid-users] config of squid to use external proxy

Clemente Aguiar wrote:
> ----- Mensagem Original-----
> De: Clemente Aguiar <clemente.aguiar_at_madeiratecnopolo.pt>
> Para: Amos Jeffries <squid3_at_treenet.co.nz>
> Cc: squid-users_at_squid-cache.org
> Assunto: Re: [squid-users] config of squid to use external proxy
> Data: Thu, 28 Jan 2010 15:15:43 +0000
>
> Sex, 2010-01-29 às 03:32 +1300, Amos Jeffries escreveu:
>> Clemente Aguiar wrote:
>>> I want to config my transparent squid to use an external proxy (with
>>> user/password) authentication when accessing a specific set of sites.
>>>
>>> At present the situation is as follows:
>>> When I want to access a specific site, say www.example.com, I am
>>> required to set my browser proxy settings to use an external proxy, for
>>> instance proxy.external.com port 8080, and then I am required to enter a
>>> user and password. Basically the site www.example.com is only accessible
>>> through this proxy which is external to our site.
>>>
>>> On our site we have our own squid box configured as transparent cache
>>> (using WCCPv2), so what I would like is to be able to access
>>> www.example.com (transparently), i.e. without having to change my
>>> browser proxy settings.
>>>
>>> Can anybody help me with the squid config?
>>>
>> Two possible solutions:
>>
>> 1) requires a single login using Basic auth to the parent. shared by all
>> users of the child proxy.
>> cache_peer .... login=Username:Password
>>
>> 2) permits for a variation of usernames, but Password is not
>> retrievable. Requires a helper that returns "OK user=Foo" when handed an
>> IP address and th parent proxy to accept the same password fro all users
>> (anonymous login with username tracking )
>>
>> external_acl_type ...
>> cache_peer ... login=PASS
>> or
>> external_acl_type ...
>> cache_peer ... login=*:FixedPassword
>>
>>
>> Amos
>
> Thanks.
>
> I tried this and it seems to work.
> Is this correct?
>
> cache_peer proxy.external.com parent 8080 0 no-query login=user:pass
> acl example_acl dstdomain .example.com
> cache_peer_access proxy.external.com allow example_acl
> never_direct allow example_acl
>

Yes

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE21
   Current Beta Squid 3.1.0.15