RE: [squid-users] Transparent proxy on LDAP_GROUP

 
Dear Amos,

Thanks for yours always clear & bountiful answer. This really help the freshers of Squid like me.

Best Regards
Tony Fei





-----Original Message-----
From: Amos Jeffries [mailto:squid3_at_treenet.co.nz]
Sent: 2010年8月16日 19:54
To: squid-users_at_squid-cache.org
Subject: Re: [squid-users] Transparent proxy on LDAP_GROUP

tony.fei_at_oocl.com wrote:
>
> Dear experts,
>
> I configed Squid with LDAP_Group authentication, each user in ProxyUsers group of AD can surf after inputting user name/password when he open browser.
> I'd like to know is there a way needn't user input id/passoword if he already in ProxyUsers group, to say make Squid total transparent to users. Thanks for sharing !

The popup is part of the web browsers security system. Squid has nothing to do with that.

Modern browsers can be configured with a login cache for website and proxy logins. Once the master password is given the others are handed out as needed to the right places.

Use of secure auth protocols (Digest, NTLM, Kerberos) can also help the browser send pre-encrypted tokens without needing a popup. Squid can participate there by being configured to use them. Basic auth protocol has the password in visible text form, so handing it out without user consent is a bad idea and browser wont do it.

Amos
--
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.6
   Beta testers wanted for 3.2.0.1

IMPORTANT NOTICE
Email from OOCL is confidential and may be legally privileged. If it is not
intended for you, please delete it immediately unread. The internet
cannot guarantee that this communication is free of viruses, interception
or interference and anyone who communicates with us by email is taken
to accept the risks in doing so. Without limitation, OOCL and its affiliates
accept no liability whatsoever and howsoever arising in connection with
the use of this email. Under no circumstances shall this email constitute
a binding agreement to carry or for provision of carriage services by OOCL,
which is subject to the availability of carrier's equipment and vessels and
the terms and conditions of OOCL's standard bill of lading which is also
available at http://www.oocl.com.
Received on Tue Aug 17 2010 - 00:37:38 MDT