Re: [squid-users] http_accel mode authentication ??

From: <vwake_s@dont-contact.us>
Date: Wed, 19 Sep 2001 12:09:38 +0600 (IST)

Thanks for the help. I guess I didnt concentrate on the warning. Does that mean the best and the only option for me is to configure the browsers ?

Vivek
   

Henrik Nordstrom <hno@squid-cache.org>:

> vwake_s@sify.com wrote:
>
> > The entire setup is fine as long as I configure my browser with my
> > proxy details. But I have 500+ users and trying to manually change
> > the browser setting will be killing. The only option ( i guess ?) is
> > to intercept and proxy
>
> Not an option if you want authentication of your users. HTTP only
> defines proxy authentication when the browser is using a proxy which it
> isn't when you are having the proxy "magically" intercept the traffic,
> claiming to be the origin server.
>
> I assume you did not notice the small warning in squid.conf?
>
> # WARNING: proxy_auth can't be used in a transparent proxy.
> It
> # collides with any authentication done by origin servers. It
> may
> # seem like it works at first, but it doesn't.
>
> > If I turn on http_accel proxy does not authenticate, If I dont turn it
> on I cant
> > intercept port 80 requests.
>
> Authentication is only possible on proxied or acceleratd traffic, not
> intercepted traffic.
>
> If you enable httpd_accel_with_proxy then Squid can be used both in
> proxy and interception mode. But it won't help you getting intercepted
> traffic authenticated.
>
> --
> Henrik Nordstrom
> Squid Hacker
>

-------------------------------------------------
This mail sent through : http://mail.sify.com
Received on Wed Sep 19 2001 - 00:12:46 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:16 MST