Re: [squid-users] Squid 2.6 Stable13 with ISA as Upstream

[Henrik Nordstrom]

On ons, 2007-07-04 at 12:34 +0530, Shekhar Gupta wrote:
 The problem starts at squid when i don't have login=PASS
 option set for squid it  ask for the username and password which is
 good , however if i type the username  and password it doesn't take
 those credentials . and if i have login=PASS option  set then it will
 show a default deny page for ISA as it tried using anonymous  account
 .

login=PASS should work I think.

Is the client logged on to the domain?

Try using the short hostname for the proxy, or add the proxy host to the
list of trusted sites.

Regards
Henrik


signature.asc
Description: This is a digitally signed message part

Re: [squid-users] Squid 2.6 Stable13 with ISA as Upstream

[Henrik Nordstrom]

On tor, 2007-07-05 at 15:14 +0530, Shekhar Gupta wrote:
 I agree its the client , then why its working in basic and not in Integrated.

Basic is not integrated with the domain, and the client never ever
attemtpts any form of automatic authentication when using Basic.

 What i get on ISA is this
 Error Code: 407 Proxy Authentication Required. The ISA Server requires
 authorization to fulfill the request. Access to the Web Proxy filter
 is denied. (12209)



Then the client 
 
 Regards,
 Shekhar
 
 On 7/5/07, Henrik Nordstrom [EMAIL PROTECTED] wrote:
  On tor, 2007-07-05 at 14:56 +0530, Shekhar Gupta wrote:
 
   The problem is with Squid not passing the correct information . when i
   set my upstream ISA server for Basic Authentication then with
   login=PASS option squid prompt for username and password and it works
   perfectly fine , however we are using Integrated option on upstream
   ISA server where every user has to authenticate himself , in this case
   if i set login=PASS then squid will not prompt for any username and
   password , however if i take login=PASS option then squid will prompt
   for credentials and when i type in it will come again and as about
   username and password .
 
  It's not Squid, it's the client who sends the credentials, and it's the
  ISA which accepts them as guest instead of rejecting them as invalid.
 
  If you take away the login=PASS then Squid will not pass the
  credentials to the peer, and authentication to the peer will not work
  (user always queried, somewhat confusing but how things work..)
 
  Squid just relays the communication between the client and upstream
  proxy.
 
  Regards
  Henrik
 
 


signature.asc
Description: This is a digitally signed message part