RE: [squid-users] Getting SARG to show usernames instead of IP

Chinner.

This information is not part of the squid configuration but I couldn't let you jump to Cisco wccp without sharing my experience.

That feature is not working right with any asa5500 IOS version, it has a lot of bugs. Be very careful if you set it up on production environment.

Regards.

Alfonso.

-----Mensaje original-----
De: chinner999 [mailto:chinner999_at_gmail.com]
Enviado el: miércoles, 20 de julio de 2011 11:39 a.m.
Para: squid-users_at_squid-cache.org
Asunto: Re: [squid-users] Getting SARG to show usernames instead of IP

Right from the squid.conf file

 WARNING: authentication can't be used in a transparently intercepting
# proxy as the client then thinks it is talking to an origin server and
# not the proxy. This is a limitation of bending the TCP/IP protocol to
# transparently intercepting port 80, not a limitation in Squid.
# Ports flagged 'transparent', 'intercept', or 'tproxy' have
# authentication disabled.

Guess I can't use authentication with a transparent setup. Will have to investigate intercept proxy. I'm trying to use Cisco WCCP via our Cisco 5505's so if I go intercept proxy and the Squid server goes offline, Internet traffic can still go through.


---- On Wed, 20 Jul 2011 10:21:47 -0600 Chad Naugle wrote ----

>Simple answer: SARG (or any log analyzer) requires Squid to post
>usernames in the access log, by using authentication helpers. I am not
>certain if this can be done in Transparent or Intercept mode at all.
>
>>>> chinner999 7/20/2011 12:11 PM >>>
>Hi guys,
>I have SARG running and the reports shows usage per user by ip address.
> How do I get it to show username instead? The users are using Active
>Directory.
>
>I don't have Squid configured for any authentication currently.
>
>Ubuntu v10.04
>Sarg v2.2.7.1
>Squid v3.1.6 - transparent
>
>Thanks.
>
>
>
>Travel Impressions made the following annotations
>-------------------------------------------------------------
>"This message and any attachments are solely for the intended recipient
>and may contain confidential or privileged information. If you are not
>the intended recipient, any disclosure, copying, use, or distribution of
>the information included in this message and any attachments is
>prohibited. If you have received this communication in error, please
>notify us by reply e-mail and immediately and permanently delete this
>message and any attachments.
>Thank you."
>
Received on Thu Jul 21 2011 - 01:42:51 MDT