Re: [squid-users] Squid 2.6 Stable13 with ISA as Upstream

From: Henrik Nordstrom <[email protected]>
Date: Thu, 05 Jul 2007 23:07:05 +0200

On tor, 2007-07-05 at 15:14 +0530, Shekhar Gupta wrote:
> I agree its the client , then why its working in basic and not in Integrated.

Basic is not integrated with the domain, and the client never ever
attemtpts any form of automatic authentication when using Basic.

> What i get on ISA is this
> Error Code: 407 Proxy Authentication Required. The ISA Server requires
> authorization to fulfill the request. Access to the Web Proxy filter
> is denied. (12209)

Then the client
>
> Regards,
> Shekhar
>
> On 7/5/07, Henrik Nordstrom <henrik@henriknordstrom.net> wrote:
> > On tor, 2007-07-05 at 14:56 +0530, Shekhar Gupta wrote:
> >
> > > The problem is with Squid not passing the correct information . when i
> > > set my upstream ISA server for Basic Authentication then with
> > > login=PASS option squid prompt for username and password and it works
> > > perfectly fine , however we are using Integrated option on upstream
> > > ISA server where every user has to authenticate himself , in this case
> > > if i set login=PASS then squid will not prompt for any username and
> > > password , however if i take login=PASS option then squid will prompt
> > > for credentials and when i type in it will come again and as about
> > > username and password .
> >
> > It's not Squid, it's the client who sends the credentials, and it's the
> > ISA which accepts them as "guest" instead of rejecting them as invalid.
> >
> > If you take away the "login=PASS" then Squid will not pass the
> > credentials to the peer, and authentication to the peer will not work
> > (user always queried, somewhat confusing but how things work..)
> >
> > Squid just relays the communication between the client and upstream
> > proxy.
> >
> > Regards
> > Henrik
> >
> >

Received on Thu Jul 05 2007 - 15:07:19 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Aug 01 2007 - 12:00:03 MDT