[squid-users] Proxy Auth

2011-05-16 Thread Márcio Luciano Donada
Hi, I use the version Squid Cache: Version 2.7.STABLE9, in the FreeBSD. So that request username and password, but sometimes get some problems that need specific software to access the Internet and it can not authenticate. I found some materials that supposedly would make the release, but still cou

[squid-users] proxy auth

2003-02-20 Thread Paul Houselander
Hi Im trying to achieve the following. I allow proxy access without authentication for my users, I have 1 office that I want to deny access unless they provide a username and password. I have a very large amount of subnets and do not specify them in squid.conf so basicly have a http_access allo

Re: [squid-users] Proxy Auth

2011-05-16 Thread Luis Daniel Lucio Quiroz
Le lundi 16 mai 2011 09:30:01, Márcio Luciano Donada a écrit : > Hi, > I use the version Squid Cache: Version 2.7.STABLE9, in the FreeBSD. So > that request username and password, but sometimes get some problems that > need specific software to access the Internet and it can not > authenticate. I f

Re: [squid-users] Proxy Auth

2011-05-17 Thread Márcio Luciano Donada
Em 16/5/2011 13:59, Luis Daniel Lucio Quiroz escreveu: > Le lundi 16 mai 2011 09:30:01, Márcio Luciano Donada a écrit : >> Hi, >> I use the version Squid Cache: Version 2.7.STABLE9, in the FreeBSD. So >> that request username and password, but sometimes get some problems that >> need specific softw

Re: [squid-users] Proxy Auth

2011-05-17 Thread Amos Jeffries
On Tue, 17 May 2011 13:29:09 -0300, Márcio Luciano Donada wrote: Em 16/5/2011 13:59, Luis Daniel Lucio Quiroz escreveu: Le lundi 16 mai 2011 09:30:01, Márcio Luciano Donada a écrit : Hi, I use the version Squid Cache: Version 2.7.STABLE9, in the FreeBSD. So that request username and password,

[squid-users] Proxy Auth sniffable?

2008-04-21 Thread Andreas Pettersson
Is the browser sending username and password in cleartext or a simple base64 encoding when user authenticaties with proxy authentication against an ldap directory? -- Andreas

Re: [squid-users] proxy auth

2003-02-20 Thread Henrik Nordstrom
Some suggestions: http_access allow restricted passwd http_access deny restricted http_access allow all_subnets or depending on taste http_access deny restricted !passwdo http_access allow all_subnets Regards Henrik On Thursday 20 February 2003 15.10, Paul Houselander wrote: > Hi > > Im try

[squid-users] proxy auth / windows

2006-01-02 Thread Dustin
Hello, This may have been hashed before, so excuse if it has, as I have not been able to find the answer. How can I allow some users to access a few specific URLs? Can I specify these users based on user name instead of by ip address? I read in the FAQ that users can be granted access at specifi

[squid-users] proxy auth using AD

2010-01-12 Thread Mike Barnard
Hi, I am wondering whether its possible to have proxy auth work with two different OU and two DC entries. I have two domains a.domain.com and b.domain.com, each with different users. I need to have users from each domain authenticate and access the Internet via proxy_auth. Currently, I have, au

Re: [squid-users] Proxy Auth sniffable?

2008-04-21 Thread Guido Serassio
Hi, At 17:59 21/04/2008, Andreas Pettersson wrote: Is the browser sending username and password in cleartext or a simple base64 encoding when user authenticaties with proxy authentication against an ldap directory? Yes, as any basic authentication helper. Regards Guido - =

[squid-users] proxy auth timeout config

2005-05-30 Thread Rolf
hello Can someone clarify for me the squid config directives that control how long proxy auth credentials are kept for? I have basic auth working fine here and I think I set it up for re-auth every hour. But I have been noticing that sometimes one can go for days and in any event much longer

Re: [squid-users] proxy auth / windows

2006-01-03 Thread Mark Elsen
> Hello, > > This may have been hashed before, so excuse if it has, as I have not > been able to find the answer. > > How can I allow some users to access a few specific URLs? Can I > specify these users based on user name instead of by ip address? I > read in the FAQ that users can be granted acc

Re: [squid-users] proxy auth / windows

2006-01-03 Thread Dustin
> All of this is possible. Please study the FAQ ´Access Controls´ in greater > depth and detail. > > > M. > I went through the FAQ again, but have not found what I need to know. I did however piece together this from some of the examples. Again, what I want to do, is allow a group of users

[squid-users] proxy-auth NTLM stop working

2011-05-10 Thread Ricardo Nuno
Hi, I had a working setup with Ubuntu 10.04 LTS x64 with the following versions: squid 3.0.STABLE19-1ubuntu0.1 samba 2:3.4.7~dfsg-1ubuntu3.5 We have a AD domain with around 50 clients using Windows 7 and joined in the domain. For this clients we user squid with kerberos and it's working fine wit

Re: [squid-users] proxy auth using AD

2010-01-12 Thread Kinkie
On Tue, Jan 12, 2010 at 2:12 PM, Mike Barnard wrote: > Hi, > > I am wondering whether its possible to have proxy auth work with two > different OU and two DC entries. > > I have two domains a.domain.com and b.domain.com, each with different > users. I need to have users from each domain authentica

Re: [squid-users] proxy auth using AD

2010-01-12 Thread Mike Barnard
forgot to cc the list... Hi > Perhaps you can use a domain-trust between a.domain.com and b.domain.com? > There is a trust between the two domains, but the OU structure is different. a.domain.com has OU=Sections OU=Department OU=Office Location OU=Organisation Name and the users in the differ

[squid-users] Proxy Auth and Neighbour Caches

2007-12-07 Thread John Halfpenny
Hi All Is it possible for me to cache at Server A using NTLM, and upstream the request to parent Server B, logging the web request with username at server B only? Server B also uses NTLM for it's local clients. As ever thanks in advance John __

[squid-users] proxy auth with java applets

2005-04-11 Thread Rolf
hello is it possible to explain why with proxy authentication enabled, when a site is visited that wishe sto run an applet, a dialog seeking user credentials is displayed befor ethe applet will run? This the the circumstance where the browser has already supplied credentials to a previous auth

Re: [squid-users] proxy auth timeout config

2005-05-30 Thread James Gray
On Mon, 30 May 2005 11:55 pm, Rolf wrote: > hello > > Can someone clarify for me the squid config directives that control how > long proxy auth credentials are kept for? > > I have basic auth working fine here and I think I set it up for re-auth > every hour. But I have been noticing that sometimes

Re: [squid-users] proxy auth timeout config

2005-05-31 Thread Henrik Nordstrom
On Mon, 30 May 2005, Rolf wrote: Can someone clarify for me the squid config directives that control how long proxy auth credentials are kept for? The proxy asks for the credentials on each and every request. The only caching of the credentials done by Squid is that if caches validity of the

Re: [squid-users] proxy-auth NTLM stop working

2011-05-11 Thread Amos Jeffries
On 11/05/11 05:44, Ricardo Nuno wrote: Hi, I had a working setup with Ubuntu 10.04 LTS x64 with the following versions: squid 3.0.STABLE19-1ubuntu0.1 samba 2:3.4.7~dfsg-1ubuntu3.5 We have a AD domain with around 50 clients using Windows 7 and joined in the domain. For this clients we user squi

Re: [squid-users] proxy-auth NTLM stop working

2011-05-11 Thread Ricardo Nuno
> Okay to Basic auth protocol works. Now what about the other two? you have > Negotiate configured as first option and NTLM configured as second. >  It is *entirely* up to the browser which of the three options it picks to > use. >  - IE is known only to pick the first it can use and not failover.

Re: [squid-users] proxy-auth NTLM stop working

2011-05-11 Thread Amos Jeffries
On 12/05/11 02:34, Ricardo Nuno wrote: Okay to Basic auth protocol works. Now what about the other two? you have Negotiate configured as first option and NTLM configured as second. It is *entirely* up to the browser which of the three options it picks to use. - IE is known only to pick the fi

RE: [squid-users] proxy auth with java applets

2005-04-11 Thread Elsen Marc
> > hello > > is it possible to explain why with proxy authentication > enabled, when a > site is visited that wishe sto run an applet, a dialog seeking user > credentials is displayed befor ethe applet will run? > > This the the circumstance where the browser has already supplied > creden

Re: [squid-users] proxy auth with java applets

2005-04-12 Thread Henrik Nordstrom
On Tue, 12 Apr 2005, Rolf wrote: is it possible to explain why with proxy authentication enabled, when a site is visited that wishe sto run an applet, a dialog seeking user credentials is displayed befor ethe applet will run? This happens if you are using a JRE (Java Runtime Environment) which do

[squid-users] proxy auth hosts and active directory

2004-11-17 Thread Rolf
hello I have proxy auth turned on here and it uses the squid_ldap_auth and squid_ldap_group helpers to query an Active Directory Server with a search for valid credentials and group membership in order to determine access. All works fine. Three questions. Firstly, in the external_acl_type direc

Re: [squid-users] proxy auth hosts and active directory

2004-12-09 Thread Henrik Nordstrom
On Thu, 18 Nov 2004, Rolf wrote: Firstly, in the external_acl_type directive, -h hostname defines the Active Directory server to query. Can I specify for redundancy purposes more than one hostname? Yes. Secondly, I am about to deploy a second squid box for redundancy purposes. How, if at all, is

Re: [squid-users] proxy auth hosts and active directory

2004-12-09 Thread Rolf
Hello Thank you very much. I thought the initial lack of any response was because I'd asked such silly questions. Firstly, in the external_acl_type directive, -h hostname defines the Active Directory server to query. Can I specify for redundancy purposes more than one hostname? Yes. I did some

Re: [squid-users] proxy auth hosts and active directory

2004-12-09 Thread Henrik Nordstrom
On Fri, 10 Dec 2004, Rolf wrote: So for both helpers I have -H "ldap://hostA ldap://hostb";. Seems to work. Is this ok, or ought I be using the -h "hostA hostB" format? Either one is fine. Regards Henrik

[squid-users] Antwort: Re: [squid-users] proxy auth using AD

2010-01-12 Thread Martin . Pichlmaier
An Tom Tux , squid-users@squid-cache.org Kopie Thema Re: [squid-users] proxy auth using AD forgot to cc the list... Hi > Perhaps you can use a domain-trust between a.domain.com and b.domain.com? > There is a trust between the two domains, but the OU structure is different. a.domai

[squid-users] proxy auth user name in custom error messages

2007-02-26 Thread Derek Evans
I apologize in advance if I haven't dug deep enough to find the answer to this already, or if this should be posted to the dev list for feature request. Maybe I'm just looking for confirmation of the obvious. I'm looking to include the proxy auth username in custom error messages. I found ref

Re: [squid-users] proxy auth user name in custom error messages

2007-02-26 Thread Adrian Chadd
On Mon, Feb 26, 2007, Derek Evans wrote: > I apologize in advance if I haven't dug deep enough to find the answer > to this already, or if this should be posted to the dev list for feature > request. Maybe I'm just looking for confirmation of the obvious. > > I'm looking to include the proxy au