Re: [squid-users] authentication via web page

2014-02-04 Thread Al Zick
Hello, On Jan 31, 2014, at 12:12 PM, Amos Jeffries wrote: On 31/01/2014 11:56 a.m., Al Zick wrote: Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned about

Re: [squid-users] authentication via web page

2014-01-31 Thread Leonardo Rodrigues
Em 30/01/14 20:56, Al Zick escreveu: Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned about security with web page authentication. Also, I am not really sure

Re: [squid-users] authentication via web page

2014-01-31 Thread Amos Jeffries
On 31/01/2014 11:56 a.m., Al Zick wrote: > Hi, > > I am considering switching to authentication via a web page. Are there > examples of how to do this somewhere? What are the pros and cons of this > configuration? I am very concerned about security with web page > authentication. The Pro (singula

[squid-users] authentication via web page

2014-01-30 Thread Al Zick
Hi, I am considering switching to authentication via a web page. Are there examples of how to do this somewhere? What are the pros and cons of this configuration? I am very concerned about security with web page authentication. Also, I am not really sure if it is a good idea. For example,

[squid-users] Authentication problem upgrading from squid 2 to squid 3

2012-12-20 Thread Javier Smaldone
I've been using squid 2.6.STABLE5 for a long time. Now, I'm upgrading to 3.1.19 (Ubuntu 12.04). On my previous setup i've used ldap_auth (with basic authentication) and after tuning my configuration I made it work for squid3. But now I have a problem with some (allowed) sites that load some (forbi

Re: Re: [squid-users] Authentication of non-standard methods

2012-12-14 Thread Trever L. Adams
On 12/11/2012 05:32 PM, Amos Jeffries wrote: > On 12.12.2012 11:33, Trever L. Adams wrote: >> Hello Everyone, >> >> I am looking at Shibboleth. I have seen one example >> >> (http://www.switch.ch/aai/support/presentations/opcom-201105/AAI-OpCom-AAI_for_mandatory_authentication_and_proxy_usage.pdf)

Re: [squid-users] Authentication of non-standard methods

2012-12-11 Thread Amos Jeffries
On 12.12.2012 11:33, Trever L. Adams wrote: Hello Everyone, I am looking at Shibboleth. I have seen one example (http://www.switch.ch/aai/support/presentations/opcom-201105/AAI-OpCom-AAI_for_mandatory_authentication_and_proxy_usage.pdf) for using it with Squid. I am afraid it makes no sense to

[squid-users] Authentication of non-standard methods

2012-12-11 Thread Trever L. Adams
Hello Everyone, I am looking at Shibboleth. I have seen one example (http://www.switch.ch/aai/support/presentations/opcom-201105/AAI-OpCom-AAI_for_mandatory_authentication_and_proxy_usage.pdf) for using it with Squid. I am afraid it makes no sense to me. I am afraid I do not know much about Shibb

[squid-users] Authentication problem

2012-11-22 Thread Warren Baker
HI List I have squid-3.2.3 configured to make use of negotiate, and to authenticate certain users. However the following config doesn't work acl userA proxy_auth warren acl userB proxy_auth testb http_access allow userA http_access allow userB http_access deny all userA successfully authentica

Re: [squid-users] Authentication problems with NTLM

2012-07-06 Thread Bruno Santos
HomeNetworks ntlmAuth and it just start working - no authentication in windows... Thank you all ! - Original Message - From: "Amos Jeffries" To: squid-users@squid-cache.org Sent: Friday, 6 July, 2012 2:08:19 PM Subject: Re: [squid-users] Authentication problems with NTLM On 6

Re: [squid-users] Authentication problems with NTLM

2012-07-06 Thread Amos Jeffries
On 6/07/2012 11:42 p.m., Bruno Santos wrote: Hi ! I've configure squid 3.1.10-1 (latest available for CentOS 6.2) with NTLM authentication, but squid keeps asking for username and password. And sometimes more than once... Users are authenticated in the domain, using IE6/7/9, but squid keeps

[squid-users] Authentication problems with NTLM

2012-07-06 Thread Bruno Santos
Hi ! I've configure squid 3.1.10-1 (latest available for CentOS 6.2) with NTLM authentication, but squid keeps asking for username and password. And sometimes more than once... Users are authenticated in the domain, using IE6/7/9, but squid keeps asking for username/password. Those with ot

[squid-users] Authentication with active directory (Windows Server 2008).

2012-06-15 Thread João Paulo Ferreira
Hello, I would like an opinion of you, I'm implentando squid in the company where I work and would like to integrate with our active directory (windows server 2008 R2) in the same way that the ntlm but the same was giving a little problem because the user accounts were being blocked. Sorry I'm a

Re: [squid-users] Authentication bug in 3.1.19 solved in 3.2.0.17

2012-05-27 Thread Amos Jeffries
On 25/05/2012 8:37 p.m., Alan wrote: Hello, I'm implementing a proxy server that authenticates users via radius, and then based on the source ip, login and the destination, grants access or not to the requested objects. The relevant section of squid.conf is: auth_param basic program /usr/lib/s

[squid-users] Authentication bug in 3.1.19 solved in 3.2.0.17

2012-05-25 Thread Alan
Hello, I'm implementing a proxy server that authenticates users via radius, and then based on the source ip, login and the destination, grants access or not to the requested objects. The relevant section of squid.conf is: auth_param basic program /usr/lib/squid/squid_radius_auth -f /etc/squid/ra

AW: AW: [squid-users] Authentication problem

2012-05-15 Thread Fuhrmann, Marcel
Gesendet: Mittwoch, 9. Mai 2012 03:53 An: squid-users@squid-cache.org Betreff: Re: AW: [squid-users] Authentication problem On 09.05.2012 01:44, Fuhrmann, Marcel wrote: > Hi Markus, > > sorry, but it doesn't work. :-( > > - Added this line in squid.conf > - server squid3 reloa

Re: [squid-users] authentication issue

2012-05-10 Thread Harry Mills
On 10/05/2012 22:31, Donald Sylvester Bacha wrote: Dear All, Can you guys please advise on how to resolve authentication issue where pop up box keep prompting for authentication. Users are part of active directory and squid is set up to use ntlm for authentication. This issue is happening f

[squid-users] authentication issue

2012-05-10 Thread Donald Sylvester Bacha
Dear All, Can you guys please advise on how to resolve authentication issue where pop up box keep prompting for authentication. Users are part of active directory and squid is set up to use ntlm for authentication. This issue is happening for all users. There were not any configuration chan

Re: AW: [squid-users] Authentication problem

2012-05-08 Thread Amos Jeffries
On 09.05.2012 01:44, Fuhrmann, Marcel wrote: Hi Markus, sorry, but it doesn't work. :-( - Added this line in squid.conf - server squid3 reload - deleted IE cache restarted IE and open the website -> same error. Err, yeah. Leaving the headers alone only works if one was already playing with

AW: [squid-users] Authentication problem

2012-05-08 Thread Fuhrmann, Marcel
stadt.de] Gesendet: Dienstag, 8. Mai 2012 15:32 An: squid-users@squid-cache.org Betreff: RE: [squid-users] Authentication problem Hi Marcel, You have to add a small piece in your config. I think, it should lool somehow like this: header_access Authorization allow all And restart your squid.

RE: [squid-users] Authentication problem

2012-05-08 Thread Markus Lauterbach
g, 8. Mai 2012 15:04 > An: squid-users@squid-cache.org > Betreff: [squid-users] Authentication problem > > Hello, > > i am using 3.0.STABLE19-1ubuntu0.2 and I have a problem accessing a website. > Normally (without proxy) I am getting this windows to login: > http://ubu

[squid-users] Authentication problem

2012-05-08 Thread Fuhrmann, Marcel
Hello, i am using 3.0.STABLE19-1ubuntu0.2 and I have a problem accessing a website. Normally (without proxy) I am getting this windows to login: http://ubuntuone.com/5fEJKKTenjJuAjJm9AJjSu With proxy I get this error (german; but understandable): http://ubuntuone.com/6zbxnmZevYWiDDqPMG24Um Can s

Re: [squid-users] Authentication Logging/Debugging

2012-04-16 Thread Amos Jeffries
On 17.04.2012 09:03, Chris Waters wrote: I am working some authentication/performance issues with Squid 3.1.19 on Ubuntu with NTLM via winbind and a filtering upstream service (proxy chaining). Is there a method for turning on more verbose logging that either shows the object the authentication

[squid-users] Authentication Logging/Debugging

2012-04-16 Thread Chris Waters
I am working some authentication/performance issues with Squid 3.1.19 on Ubuntu with NTLM via winbind and a filtering upstream service (proxy chaining). Is there a method for turning on more verbose logging that either shows the object the authentication parts are processing on or interleaving the

Re: [squid-users] Authentication problem

2012-04-06 Thread Mohamed Amine Kadimi
> The designed purpose of these redirect tricks in commercial proxies (and > Squid captive portals too) is to get the client to make a request to a > controlled web service. That server pulls details such as the cient IP > address and user-agent header (maybe other things) which the proxy can use >

Re: [squid-users] Authentication problem

2012-04-04 Thread Amos Jeffries
On 4/04/2012 3:54 a.m., Mohamed Amine Kadimi wrote: OK, so here's another pseudo code that comes to my mind, this is somehow similar to some commercial products (Ironport, bluecoat): - The user connects to http://www.somesite.com via the proxy - The Proxy redirects to http

Re: [squid-users] Authentication problem

2012-04-03 Thread Mohamed Amine Kadimi
OK, so here's another pseudo code that comes to my mind, this is somehow similar to some commercial products (Ironport, bluecoat): - The user connects to http://www.somesite.com via the proxy - The Proxy redirects to http://authenticationportal/http://www.somesite.com with 302 return code. - User

Re: [squid-users] Authentication problem

2012-04-02 Thread Amos Jeffries
On 3/04/2012 3:40 a.m., Mohamed Amine Kadimi wrote: Dear Developpers and Community, I would like to set up the following configuration using squid: When a user asks for a web page he is transparently redirected to squid, where an authentication must be done before serving the user with content.

[squid-users] Authentication problem

2012-04-02 Thread Mohamed Amine Kadimi
Dear Developpers and Community, I would like to set up the following configuration using squid: When a user asks for a web page he is transparently redirected to squid, where an authentication must be done before serving the user with content. However, users IP are being NATed before going to th

Re: [squid-users] Authentication Prompts

2011-09-09 Thread Amos Jeffries
On 10/09/11 01:52, Jenny Lee wrote: Date: Fri, 9 Sep 2011 12:50:24 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication Prompts On 09/09/11 06:28, Matt Cochran wrote: I've been trying to model two different kinds of users in ACLs,

RE: [squid-users] Authentication Prompts

2011-09-09 Thread Jenny Lee
> Date: Fri, 9 Sep 2011 12:50:24 +1200 > From: squ...@treenet.co.nz > To: squid-users@squid-cache.org > Subject: Re: [squid-users] Authentication Prompts > > On 09/09/11 06:28, Matt Cochran wrote: > > I've been trying to model two different kinds of users in

Re: [squid-users] Authentication Prompts

2011-09-08 Thread Amos Jeffries
On 09/09/11 06:28, Matt Cochran wrote: I've been trying to model two different kinds of users in ACLs, where the kids are authenticated by one account, and the adults another. The kids are allowed to go only to a whitelist of websites, but I'd like the adults to be able to override this behavi

[squid-users] Authentication Prompts

2011-09-08 Thread Matt Cochran
I've been trying to model two different kinds of users in ACLs, where the kids are authenticated by one account, and the adults another. The kids are allowed to go only to a whitelist of websites, but I'd like the adults to be able to override this behavior for a while if they enter their creden

RE: [squid-users] Authentication infinite loop

2011-08-10 Thread David Parks
for me for now. Dave -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, July 26, 2011 3:41 PM To: squid-users@squid-cache.org Subject: RE: [squid-users] Authentication infinite loop On Tue, 26 Jul 2011 15:05:22 -0700, David Parks wrote: > After some mor

RE: [squid-users] Authentication infinite loop

2011-07-26 Thread Amos Jeffries
On Tue, 26 Jul 2011 15:05:22 -0700, David Parks wrote: After some more testing I'm finding more cause for concern here. I'm using 3.2.0.9 in this test. Please use 3.2.0.10. .9 has some big issues. Digest authentication is configured. I am now just using a simple auth helper script which si

RE: [squid-users] Authentication infinite loop

2011-07-26 Thread David Parks
quot;$LINE" >>/tmp/output echo "ERR" done -Original Message- From: David Parks [mailto:davidpark...@yahoo.com] Sent: Monday, July 25, 2011 7:11 PM To: squid-users@squid-cache.org Subject: [squid-users] Authentication infinite loop In doing some dev work I see

[squid-users] Authentication infinite loop

2011-07-25 Thread David Parks
In doing some dev work I see a situation where squid gets into an infinite loop with the browser. The situation: 1) Browser attempts digest authentication against squid (running with a custom auth helper) 2) auth helper fails user authentication 3) I believe squid caches the authentication failure

Re: [squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Amos Jeffries
On Wed, 06 Jul 2011 15:42:18 +0200, Robert Velter wrote: Hi Amos, thanks for your clarification and the link. So i try now the following: 1) Add a working basic auth to auth_param (probably ldap_auth). 2) Modify the access list from http_access allow ldapgroup-access http_access d

Re: [squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Robert Velter
Hi Amos, thanks for your clarification and the link. So i try now the following: 1) Add a working basic auth to auth_param (probably ldap_auth). 2) Modify the access list from http_access allow ldapgroup-access http_access deny all to http_access deny !ldapgroup-access

Re: [squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Amos Jeffries
On 06/07/11 23:19, Robert Velter wrote: Hi all, i have a (nice?) squid authentication/authorization challenge. I already have a working authentication configuration using negiotiate with squid_kerb_auth and ntlm using ntlm_auth. Authorization is done using an external_acl_type with squid_ldap_g

[squid-users] Authentication/Authorization Challenge

2011-07-06 Thread Robert Velter
Hi all, i have a (nice?) squid authentication/authorization challenge. I already have a working authentication configuration using negiotiate with squid_kerb_auth and ntlm using ntlm_auth. Authorization is done using an external_acl_type with squid_ldap_group. Now i want that users can authentic

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-02 Thread Saurabh Agarwal
I used "pipeline_prefetch off" setting in squid.conf and it works. Regards, Saurabh -Original Message- From: Senthilkumar [mailto:senthilkumaar2...@gmail.com] Sent: Wednesday, February 02, 2011 12:48 PM To: Saurabh Agarwal Subject: Re: [squid-users] Authentication to Shar

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Senthilkumar
Hi Amos, We are also having trouble in accessing share point site which uses NTLM authentication. We have configured squid with NTLM scheme. Whether the below fix (pipeline_prefetch on ) works for the squid which is configured with NTLM proxy authentication. Thanks Senthil Amos Jeffries wr

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On Tue, 1 Feb 2011 20:25:42 +0530, Saurabh Agarwal wrote: > It works now! I followed the code and then turned "off pipeline_prefetch". > In code there was this check which was setting no_connection_auth flag to > 1. > > if (Config.onoff.pipeline_prefetch) > request->flags.no_connection_auth =

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
ove forward. Thank You Amos! Regards, Saurabh -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, February 01, 2011 6:30 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to Sharepoint not happening On 02/02/11 00:43, Sau

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On 02/02/11 00:43, Saurabh Agarwal wrote: Looks like we are making progress. Yeah there is a condition in the code client_side.c that relates to when "WWW-Authenticate" header is being deleted. Condition checks for no_connection_auth flag in the request. This is the code. It checks if there is

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
s [mailto:squ...@treenet.co.nz] Sent: Tuesday, February 01, 2011 4:39 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to Sharepoint not happening On 01/02/11 23:57, Saurabh Agarwal wrote: > Thanks Amos. Yeah they were cut and paste errors. Other than that I have > trie

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On 01/02/11 23:57, Saurabh Agarwal wrote: Thanks Amos. Yeah they were cut and paste errors. Other than that I have tried using http11 with http_port and ignore_expect and it still doesn't work. I think this is by design in Squid. Following code in "client_side.c" suggests that it will always f

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
h -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, February 01, 2011 3:34 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to Sharepoint not happening On 01/02/11 21:29, Saurabh Agarwal wrote: > Hi Amos > > I am using squid.2.7

Re: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Amos Jeffries
On 01/02/11 21:29, Saurabh Agarwal wrote: Hi Amos I am using squid.2.7.STABLE7. Following is my configuration. I want to allow everything. http_port 192.168.11.35:3128 transparent acl from_localhost src 192.168.11.35 http_port 10.102.79.82:3128 transparent acl from_localhost src 10.102.79.8

RE: [squid-users] Authentication to Sharepoint not happening

2011-02-01 Thread Saurabh Agarwal
15 minutes request_timeout 5 minutes half_closed_clients off pconn_timeout 1 minute Regards, Saurabh -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, February 01, 2011 12:12 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] Authentication to

Re: [squid-users] Authentication to Sharepoint not happening

2011-01-31 Thread Amos Jeffries
On 01/02/11 19:27, Saurabh Agarwal wrote: Hi All I am running Squid as a transparent proxy and can't authenticate to sharepoint server. If I bypass squid then everything works fine. I have not compiled Squid with any of the authentication related configurables --enable-auth="basic,digest,ntlm

[squid-users] Authentication to Sharepoint not happening

2011-01-31 Thread Saurabh Agarwal
Hi All I am running Squid as a transparent proxy and can't authenticate to sharepoint server. If I bypass squid then everything works fine. I have not compiled Squid with any of the authentication related configurables --enable-auth="basic,digest,ntlm,negotiate" --enable-basic-auth-helpers="LD

Re: [squid-users] authentication problems

2010-12-04 Thread Amos Jeffries
On 05/12/10 09:45, ant2ne wrote: I want to use squid and dansguardign to filter by groups. It is working, sort of. Problem 1, after launching the web browser it takes a very long time (a minute or 2) before the authentication dialog pops up. This needs to be instant. What am I doing wrong? Once

[squid-users] authentication problems

2010-12-04 Thread ant2ne
I want to use squid and dansguardign to filter by groups. It is working, sort of. Problem 1, after launching the web browser it takes a very long time (a minute or 2) before the authentication dialog pops up. This needs to be instant. What am I doing wrong? Once it does finally pop up, I can auth

Re: [squid-users] authentication switching

2010-11-18 Thread Amos Jeffries
On 18/11/10 22:49, Mikio Kishi wrote: Hi, Amos Squid can offer both types. Configure two sets of auth_param in the order you would prefer them to be used. I know that. auth_param ntlm program . auth_param basic program . The above parameters return the follwoing http reply. HTTP

Re: [squid-users] authentication switching

2010-11-18 Thread Mikio Kishi
Hi, Amos > Squid can offer both types. Configure two sets of auth_param in the > order you would prefer them to be used. I know that. > auth_param ntlm program . > auth_param basic program . The above parameters return the follwoing http reply. > HTTP/1.0 407 Proxy Authentication Requi

Re: [squid-users] authentication switching

2010-11-18 Thread Amos Jeffries
On 18/11/10 18:48, Mikio Kishi wrote: Hi, all Now, I'm using NTLM authentication (auth_param ntlm ..). However, we can not browse some sites (windows update or adobe's one) bacause activex control is not supported NTLM authentication. So, I'd like to browse via "Basic auth" when "NTLM auth"

[squid-users] authentication switching

2010-11-17 Thread Mikio Kishi
Hi, all Now, I'm using NTLM authentication (auth_param ntlm ..). However, we can not browse some sites (windows update or adobe's one) bacause activex control is not supported NTLM authentication. So, I'd like to browse via "Basic auth" when "NTLM auth" is failed. Is it possible to configure

RE: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-26 Thread Paul Freeman
3 AM > To: Nick Cairncross; Squid Users > Subject: RE: [squid-users] Authentication using squid_kerb_auth with > Internet Explorer 8 on Windows Server 2008 R2 > > Hi Nick > Thanks for looking at this. I appreciate your help. > > My answers to your questions are in line b

RE: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-26 Thread Paul Freeman
ect: Re: [squid-users] Authentication using squid_kerb_auth with > Internet Explorer 8 on Windows Server 2008 R2 > > > On 26/10/2010 03:56, "Paul Freeman" wrote: > > > >Hi. > >I have successfully installed Squid 3.1.8 on Ubuntu 10.04LTS and ha

Re: [squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-26 Thread Nick Cairncross
On 26/10/2010 03:56, "Paul Freeman" wrote: >Hi. >I have successfully installed Squid 3.1.8 on Ubuntu 10.04LTS and have >enabled >Kerberos/NTLM authentication using the squid_kerb_auth helper. This >setup is >working well and successfully authenticates Windows domain users when they >are logged

[squid-users] Authentication using squid_kerb_auth with Internet Explorer 8 on Windows Server 2008 R2

2010-10-25 Thread Paul Freeman
Hi. I have successfully installed Squid 3.1.8 on Ubuntu 10.04LTS and have enabled Kerberos/NTLM authentication using the squid_kerb_auth helper. This setup is working well and successfully authenticates Windows domain users when they are logged in using their domain credentials on Windows XP works

Re: [squid-users] Authentication Reverse Proxy

2010-05-03 Thread Amos Jeffries
GIGO . wrote: Hi, What is the behaviour/mechanism of authentication if using squid proxy for both as forward proxy and reverse proxy. I have successfully setup it for a forward proxy using the Helper files by Markus and the following tutorial; http://wiki.squid-cache.org/ConfigExamples/Authent

[squid-users] Authentication Reverse Proxy

2010-05-02 Thread GIGO .
Hi, What is the behaviour/mechanism of authentication if using squid proxy for both as forward proxy and reverse proxy. I have successfully setup it for a forward proxy using the Helper files by Markus and the following tutorial; http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerber

[squid-users] Authentication in squid windows

2010-04-15 Thread ondemandemails
dear frnds, i m looking forward to deploy squid on windows server 2003 for my wireless users. can some 1 help me in this case as i dnt want to make a domain because this will render the users unable to work on laptops out of the premises. other option is to make a username & password file which

Re: [squid-users] Authentication logging

2010-04-08 Thread John Horne
On Thu, 2010-04-08 at 21:43 +0100, John Horne wrote: > Hello, > > Using squid 2.7 stable 9, I have set the debug_options to 29,2 which > logs authenticated users, e.g: > >user 'xxx' has been seen at a new IP address (11.22.33.44) > > However, is there a way I can log unsuccessful authenticat

[squid-users] Authentication logging

2010-04-08 Thread John Horne
Hello, Using squid 2.7 stable 9, I have set the debug_options to 29,2 which logs authenticated users, e.g: user 'xxx' has been seen at a new IP address (11.22.33.44) However, is there a way I can log unsuccessful authentication attempts? I have increased the debug level to 6, but it still doe

Re: [squid-users] Authentication helpers not shut down

2010-04-06 Thread Henrik Nordström
tis 2010-04-06 klockan 13:49 -0700 skrev David Parks: > I noticed that running "squid -k reconfigure" starts a new authentication > helper, but does not shut down the old one. It does. > Is this normal behavior? Do I just need to monitor for the closing of the > input stream and shut down on th

[squid-users] Authentication helpers not shut down

2010-04-06 Thread David Parks
I noticed that running "squid -k reconfigure" starts a new authentication helper, but does not shut down the old one. Is this normal behavior? Do I just need to monitor for the closing of the input stream and shut down on that cue? Just wanna make sure I'm on track. Dave p.s. if there are any

Re: [squid-users] Authentication caching

2010-04-03 Thread Henrik Nordström
lör 2010-03-27 klockan 18:42 +0100 skrev Khaled Blah: > Hi all, > > I'm developing an authentication helper (Negotiate/NTLM) for squid and > I am trying to understand more how squid handles this process > internally. Most of all I'd like to know how and how long squid caches > authentication resul

[squid-users] Authentication caching

2010-03-27 Thread Khaled Blah
Hi all, I'm developing an authentication helper (Negotiate/NTLM) for squid and I am trying to understand more how squid handles this process internally. Most of all I'd like to know how and how long squid caches authentication results. I have looked at the debug logs and they show that squid seems

[squid-users] Authentication caching

2010-03-27 Thread Khaled Blah
Hi all, I'm developing an authentication helper (Negotiate/NTLM) for squid and I am trying to understand more how squid handles this process internally. Most of all I'd like to know how and how long squid caches authentication results. I have looked at the debug logs and they show that squid seems

Re: [squid-users] authentication pass through upstream server

2010-02-23 Thread Amos Jeffries
Mark Engels wrote: Mark Engels wrote: Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to ac

RE: [squid-users] authentication pass through upstream server

2010-02-22 Thread Mark Engels
Mark Engels wrote: > Hello all, > > Im hopeing this is the place to come when seeking some assistance with a > squid proxy configuration issue thats giving myself a little grief, and i > certainly hope nothing like this has been asked before. > > The general idea of what im trying to accomplish i

Re: [squid-users] authentication pass through upstream server

2010-02-22 Thread Amos Jeffries
Mark Engels wrote: Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to accomplish is to have

[squid-users] authentication pass through upstream server

2010-02-22 Thread Mark Engels
Hello all, Im hopeing this is the place to come when seeking some assistance with a squid proxy configuration issue thats giving myself a little grief, and i certainly hope nothing like this has been asked before. The general idea of what im trying to accomplish is to have a end user enter the

Re: [squid-users] Authentication Browser Dialog

2010-02-09 Thread Chris Robertson
Christian Weiligmann wrote: Am Dienstag, den 09.02.2010, 17:10 +1300 schrieb Amos Jeffries: Christian Weiligmann wrote: Hello, i use the squidproxy over 10 years, an i am very happy to have this programm for internet access, the user may look different about this. But, I have a dem

Re: [squid-users] Authentication Browser Dialog

2010-02-09 Thread Christian Weiligmann
Am Dienstag, den 09.02.2010, 17:10 +1300 schrieb Amos Jeffries: > Christian Weiligmann wrote: > > Hello, > > > > i use the squidproxy over 10 years, an i am very happy to have this > > programm for internet access, the user may look different about > > this. > > But, I have a demand concerning

Re: [squid-users] Authentication Browser Dialog

2010-02-08 Thread Amos Jeffries
Christian Weiligmann wrote: Hello, i use the squidproxy over 10 years, an i am very happy to have this programm for internet access, the user may look different about this. But, I have a demand concerning the authentication dialogs I want to authenticate the internet access for my users by

[squid-users] Authentication Browser Dialog

2010-02-08 Thread Christian Weiligmann
Hello, i use the squidproxy over 10 years, an i am very happy to have this programm for internet access, the user may look different about this. But, I have a demand concerning the authentication dialogs I want to authenticate the internet access for my users by mysql backend, but not with a

Re: [squid-users] Authentication Question

2010-01-09 Thread Amos Jeffries
michael_gra...@cadc.uscourts.gov wrote: I setup two reverse proxy sites with LDAP authentication. Authentication works fine when I access either site. The problem I'm having is after I authenticate to either site, I try and access a url on the other site and I'm prompted to authenticate again. Ho

Re: [squid-users] Authentication on server side instead of client? is that possible?

2010-01-06 Thread Kinkie
On Wed, Jan 6, 2010 at 5:22 PM, Roland Roland wrote: > Hello, > > hope this is possible to implement.. > > i've read squid.conf.default over and over again with no luck or simply no >  understanding of what i'm looking for.. > > is there a way that squid can authenticate with a certain website ins

[squid-users] Authentication on server side instead of client? is that possible?

2010-01-06 Thread Roland Roland
Hello, hope this is possible to implement.. i've read squid.conf.default over and over again with no luck or simply no understanding of what i'm looking for.. is there a way that squid can authenticate with a certain website instead of having every client on the network doing so ? in othe

[squid-users] Authentication Question

2010-01-02 Thread Michael_Grasso
I setup two reverse proxy sites with LDAP authentication. Authentication works fine when I access either site. The problem I'm having is after I authenticate to either site, I try and access a url on the other site and I'm prompted to authenticate again. How can I tell squid to check the authentic

Re: [squid-users] Authentication fall through

2009-10-23 Thread Henrik Nordstrom
fre 2009-10-23 klockan 14:27 +0100 skrev Matt Richards: > Is it possible to try this authentication and if it fails then don't > popup a login box but either try another type of authentication or continue. No, but if you can identify these machines by IP then excluding them from authentication en

[squid-users] Authentication fall through

2009-10-23 Thread Matt Richards
Hello, I have currently got squid setup so it authenticates (against ntlm) users and uses squidGuard to do the blocking. At the moment if a machine is not part of the domain I get a popup box asking for authentication. Is it possible to try this authentication and if it fails then don't popup a

RE: [squid-users] Authentication through Squid3

2009-09-04 Thread Henrik Nordstrom
fre 2009-09-04 klockan 11:37 +0200 skrev Pierre Thomas: > 2009/09/04 11:31:36| Processing Configuration File: /etc/squid/squid.conf > (depth 0) > 2009/09/04 11:31:36| Can't use proxy auth because no authentication schemes > are fully configured. > FATAL: ERROR: Invalid ACL: acl SSO proxy_auth RE

RE: [squid-users] Authentication through Squid3

2009-09-04 Thread Pierre Thomas
ximum Resident Size: 0 KB Page faults with physical i/o: 0 - -Message d'origine- De : Amos Jeffries [mailto:squ...@treenet.co.nz] Envoyé : vendredi 4 septembre 2009 10:18 À : Pierre Thomas Cc : squid-users@squid-cache.org Objet : Re: [squid-users] Authentication through Squi

Re: [squid-users] Authentication through Squid3

2009-09-04 Thread Amos Jeffries
Pierre Thomas wrote: Hi, I set up a Squid3 Proxy on my Centos 5.3 box, and it works properly since I try to setup authentication on my Active Directory. Here is an extract of my squid.conf, inspired of my old squid 2.7 configuration : __

[squid-users] Authentication through Squid3

2009-09-04 Thread Pierre Thomas
Hi, I set up a Squid3 Proxy on my Centos 5.3 box, and it works properly since I try to setup authentication on my Active Directory. Here is an extract of my squid.conf, inspired of my old squid 2.7 configuration : __ auth_param

Re: [squid-users] Authentication with Squid 3.0 forwarding the authentication to external web content filter - Edirectory

2009-07-21 Thread Amos Jeffries
On Tue, 21 Jul 2009 14:41:38 -0400, "Schuetz, Charles" wrote: > We are currently using Squid 3.0 Stable 13. We are currently sending > every= =3D one through the proxy/cache. We are implementing a user based > web cont= ent =3D filtering solution (not a linux based solution) that > authenticates

[squid-users] Authentication with Squid 3.0 forwarding the authentication to external web content filter - Edirectory

2009-07-21 Thread Schuetz, Charles
We are currently using Squid 3.0 Stable 13. We are currently sending every= =3D one through the proxy/cache. We are implementing a user based web cont= ent =3D filtering solution (not a linux based solution) that authenticates = users ag=3D ainst edirectory. The current solution sends all use

Re: [squid-users] Authentication problem. Squid3+ntlm_auth+Firefox.

2009-05-18 Thread Amos Jeffries
xor wrote: Hello, I have installed squid3 with authorisation in the windows2003 domain, with libraries kerberos5 and samba + winbind. OS Debian Lenny 5.0.1. Packages squid3, samba, krb and winbind are taken from official repositories (http://ftp.ru.debian.org/debian/). The proxy clients workin

[squid-users] Authentication problem. Squid3+ntlm_auth+Firefox.

2009-05-18 Thread xor
Hello, I have installed squid3 with authorisation in the windows2003 domain, with libraries kerberos5 and samba + winbind. OS Debian Lenny 5.0.1. Packages squid3, samba, krb and winbind are taken from official repositories (http://ftp.ru.debian.org/debian/). The proxy clients working under WinXP

Re: [squid-users] authentication mechanism selected based on ip-address

2009-02-23 Thread Amos Jeffries
> Amos Jeffries wrote: >> Joseph Spadavecchia wrote: >>> Hi all, >>> >>> We have a requirement to use different authentication mechanisms >>> based on the subnet/ip-address of the client. >>> >>> For example, a client from one subnet would authenticate against ntlm >>> while a client from another s

Re: [squid-users] authentication mechanism selected based on ip-address

2009-02-23 Thread Joseph Spadavecchia
Amos Jeffries wrote: Joseph Spadavecchia wrote: Hi all, We have a requirement to use different authentication mechanisms based on the subnet/ip-address of the client. For example, a client from one subnet would authenticate against ntlm while a client from another subnet would authenticate

Re: [squid-users] authentication mechanism selected based on ip-address

2009-02-13 Thread Amos Jeffries
Joseph Spadavecchia wrote: Hi all, We have a requirement to use different authentication mechanisms based on the subnet/ip-address of the client. For example, a client from one subnet would authenticate against ntlm while a client from another subnet would authenticate against an LDAP serve

[squid-users] authentication mechanism selected based on ip-address

2009-02-12 Thread Joseph Spadavecchia
Hi all, We have a requirement to use different authentication mechanisms based on the subnet/ip-address of the client. For example, a client from one subnet would authenticate against ntlm while a client from another subnet would authenticate against an LDAP server. AFAIK, this is normally

Re: [squid-users] Authentication Over-ride

2009-01-27 Thread Amos Jeffries
> I am working on an application for my senior project at school. I am > wondering if anyone might possibly know a way to pass a username and > password to the pop-up authentication box in squid when auth_param is > set. Something I can use with my PHP to keep the interface slick and > be able to m

  1   2   3   4   5   6   >