RE: [squid-users] Proxy_Auth Question

From: Erick Perez \(Asesor de Seguridad Informatica\) <[email protected]>
Date: Thu, 31 Jan 2002 09:11:57 -0500

Miguel, I terribly forgot (and wasted other people time) that it is not
possible. In a somehow related question I did yesterday, someone
refreshed my mind about authentication not being possible with a
transparent proxy.

Here is an extract of the docs.

" proxy_auth can't be used in a transparent proxy. It collides with any
authentication done by origin servers. It may seem like it works at
first, but it doesn't. When a Proxy-Authentication header is sent but it
is not needed during ACL checking the username is NOT logged in
access.log "

Erick Perez
Republica de Panama

-----Original Message-----
From: Miguel de la Borda [mailto:mborda@rey.com.pe]
Sent: Jueves, 31 de Enero de 2002 07:55 a.m.
To: Colin Campbell
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Proxy_Auth Question

Hi all,
excuse me, my question is : Proxy_Auth is possible with transparent
proxy????

thanks and regards

Miguel de la Borda
Lima - Peru

On Thu 31 Jan 2002 01:14, you wrote:
> Hi,
>
> On Thu, 31 Jan 2002, Erick Perez (Asesor de Seguridad Informatica)
>
> wrote:
> > Sirs,
> >
> > Will this work? I stopped and started my Squid and no error messages
> > were given (in the logs).
> > Transparent proxy is being used.
> >
> > acl mypasssite proxy_auth REQUIRED dstdomain .somestuff.com
> > http_access allow mypasssite
>
> No.
>
> You want:
>
> acl mypasssite proxy_auth REQUIRED
> acl somestuff dstdomain .somestuff.com
> http_access mypasssite somestuff
>
> Colin
Received on Thu Jan 31 2002 - 07:11:57 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:02 MST