Re: [squid-users] Problems with smb_auth and JavaApplets

On Fri, 28 Jan 2005 13:30:56 +0100
Jens Strohschnitter <suse-linux@rwz.de> wrote:

> > >Hi list,
> > >
> > >I have activated the authentification via smb_auth in our
> > >Squid 2.5 on SuSE SLES9. It works very fine, but sometimes
> > >while running a special online application based on Java
> > >another login-window appears after loading the page.
> > >The user is already logged in and works on any side, but
> > >after connecting to the application-side, another login-
> > >screen (showen as java-login-screen, not the first login-
> > >screen of windows-explorer) appears, and the user have
> > >to login again. Sometimes working with the application
> > >another login appears. So the user is getting wild :-(
> > >Is it an known problem ?
> > >The loginscreen looks like a javawindow and needs the
> > >information of the samba-account. So it is not a bug
> > >of the application.
> > >
> > >Hope someone can help me to fix this problem, thanxx
> > >a lot for any reply ...
> >
> > This is not a Squid bug: Internet Explore and the Sun JVM don't share user
> > authentication, and, as i know, Sun JVM use only basic authentication.
> >
> > You can use the following workaround:
> >
> > acl java_jvm browser Java/1.4
> > http_access allow java_jvm
> >
> > But be careful: this allow any unauthenticated Java traffic !!!
> >
>
> Hi
>
> I tried to add the workaround to my squid.conf, but I have got
> problems while integrating it, to some exisiting acls:
>
> acl INSIDE_IP dst 192.168.1.0/24
> acl proxylogin proxy_auth REQUIRED
> acl proxy_access src "/etc/allowed_networks"
> acl java_jvm browser Java/1.4
> acl GET method GET
> .
> .
> .
> never_direct allow INSIDE_IP
> http_access allow proxylogin proxy_access java_jvm
> http_access allow localhost
> http_access deny all
> never_direct allow all
>
> But now, I cant connect to the internet. How do I have
> to add the ACL to my config, that the other two restrictions:
> "proxylogin and proxy_access" work too ?
>

Ups, sorry for the fast shot - I have found the problem. Now it
works. Thanxx.

-- 
Regards,
     Jens Strohschnitter
-------------------------------------
*!!!LINUX LINUX LINUX LINUX LINUX!!!*
 
* http://www.jens-strohschnitter.de *
-------------------------------------
Set the controls for 
		 the heart of the sun
-------------------------------------