[squid-users] fyi -> proxy autoconfiguration notes

Hi all,

Some information I want to share :

I have had problems with NTLM passthrough on our intranet site.
When 1 user authenticate on the intranet, all users took this authentication
and did not get a popup auth box.
 It has been solved by placing the script on an external NT webserver in
stead of the squid-box.

Also be aware of the following :
- a prerequisite is that you must have IE5.5 with SP1 installed because of a
few bugs regarding IIS, NTLM and pac.
(Info : http://support.microsoft.com/default.aspx?scid=kb;EN-US;q276370 )
- also make sure to add to your webserver (for apache this is mime.types) :
application/x-ns-proxy-autoconfig pac dat
- there is a difference in behaviour between a wpad.dat and .pac file,
whereas .pac file is used as a automatic configuration script AND a wpad.dat
file is used within a environment to automatically detect the correct
settings (entry needs to be added to DNS)
- the proxy.pac file I use now looks like this :

function FindProxyForURL(url,host)
        {
                if (isPlainHostName(host) ||
                        dnsDomainIs(host,".domain1.com") ||
                        dnsDomainIs(host,".domain2.com") ||
                        dnsDomainIs(host,".domain3.com") ||
                        isInNet(host,"138.249.0.0","255.255.0.0"))
                        return "DIRECT";
                else if (shExpMatch(url,"https://"))
                        return "DIRECT";
                else
                        return "PROXY local_proxy:8080;" +
                        "PROXY parent1:8080;" +
                        "PROXY parent2:8080";
        }

BR,
.,/koen
Received on Tue Dec 11 2001 - 04:28:52 MST