Hallo all!

Im running my squid server with proxy_auth REQUIRED. The Linux server is
fully integrated with my AD. Samba/Winbind/kerberos all is working
great. The problem i have is that IE / Windows is automatically
authenticated against the proxy servers. But embedded players like
Windows Media Player, Quicktime and others fails to automatically auth.
I get a popup box where i can enter username / password to auth. If i do
so, i get authed and i can se the movie ...

The problem is that we are going to remove username/password within the
AD and just use smartcards. So i need to figure out how to solve this or
create and acl where i can allowd media sites.

Is it possible to solve the Media Player issue? To have it auth the same
way as IE?

How can i create an acl that allows some media sites?


#From my squid.conf - local networks have to auth.
acl MYNETWORK proxy_auth REQUIRED src 192.168.0.0/255.255.0.0
http_access allow MYNETWORK


#Tried to do something like this....
acl NoAUTHsite dstdomain *.domain1.com
acl NoAUTHsite dstdomain *.domain2.com
http_access allow NoAUTHsite




#This is from access.log when im trying to view a media link.

1198061741.907     21 127.0.0.1 TCP_MISS/404 4478 GET
http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css MYUSERNAME
DIRECT/192.71.238.83 text/html
1198061741.922     58 127.0.0.1 TCP_MISS/200 2586 GET
http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv_ad_right.jsp?
MYUSERNAME DIRECT/192.71.238.83 text/html
1198061741.933      0 127.0.0.1 TCP_DENIED/407 2159 GET
http://www.aftonbladet.se/statistik/instadia/clientstep.js - NONE/-
text/html
1198061741.936      0 127.0.0.1 TCP_DENIED/407 2089 GET
http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
se/webbtv/noje/[EMAIL PROTECTED] - NONE/- text/html
1198061741.936      0 127.0.0.1 TCP_DENIED/407 1999 GET
http://qstream-wm.qbrick.com/00862/aftonbladet1/Noje/0712/m0nj071219Cloo
ney.wmv - NONE/- text/html
1198061741.939      0 127.0.0.1 TCP_DENIED/407 1930 GET
http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css - NONE/-
text/html
1198061741.944      0 127.0.0.1 TCP_DENIED/407 2312 GET
http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
se/webbtv/noje/[EMAIL PROTECTED] - NONE/- text/html
1198061741.950      0 127.0.0.1 TCP_DENIED/407 2153 GET
http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css - NONE/-
text/html
1198061741.971     34 127.0.0.1 TCP_MISS/302 451 GET
http://www.aftonbladet.se/statistik/instadia/clientstep.js MYUSERNAME
DIRECT/192.71.238.76 text/javascript
1198061742.012     68 127.0.0.1 TCP_MISS/200 744 GET
http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
se/webbtv/noje/[EMAIL PROTECTED] MYUSERNAME DIRECT/192.71.238.79
application/x-javascript
1198061742.025     13 127.0.0.1 TCP_MISS/302 449 GET
http://www.aftonbladet.se/statistik/instadia/specials.js MYUSERNAME
DIRECT/192.71.238.76 text/javascript
1198061742.048      2 127.0.0.1 TCP_IMS_HIT/304 331 GET
http://ad.aftonbladet.se/RealMedia/ads/Creatives/default/empty.gif
MYUSERNAME NONE/- image/gif
1198061742.048     99 127.0.0.1 TCP_MISS/404 5864 GET
http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css MYUSERNAME
DIRECT/192.71.238.83 text/html
1198061742.062      0 127.0.0.1 TCP_DENIED/407 1888 GET
http://se1.instadia.net/cgi-bin/gatherfpc? - NONE/- text/html
1198061742.069      0 127.0.0.1 TCP_DENIED/407 2111 GET
http://se1.instadia.net/cgi-bin/gatherfpc? - NONE/- text/html
1198061742.083      0 127.0.0.1 TCP_DENIED/407 2086 GET
http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
se/webbtv/noje/[EMAIL PROTECTED] - NONE/- text/html
1198061742.085      0 127.0.0.1 TCP_DENIED/407 2008 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071214fi
lmerny.jpg - NONE/- text/html
1198061742.093      1 127.0.0.1 TCP_DENIED/407 2309 GET
http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
se/webbtv/noje/[EMAIL PROTECTED] - NONE/- text/html
1198061742.094      0 127.0.0.1 TCP_DENIED/407 2231 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071214fi
lmerny.jpg - NONE/- text/html
1198061742.124     76 127.0.0.1 TCP_MISS/200 655 GET
http://sifo.aftonbladet.se/data/? MYUSERNAME DIRECT/80.76.145.58
image/gif
1198061742.134     64 127.0.0.1 TCP_MISS/200 478 GET
http://se1.instadia.net/cgi-bin/gatherfpc? MYUSERNAME
DIRECT/193.88.187.16 image/gif
1198061742.145     50 127.0.0.1 TCP_MISS/200 7394 GET
http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
se/webbtv/noje/[EMAIL PROTECTED] MYUSERNAME DIRECT/192.71.238.79
application/x-javascript
1198061742.154     60 127.0.0.1 TCP_MEM_HIT/200 3957 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071214fi
lmerny.jpg MYUSERNAME NONE/- image/jpeg
1198061742.169     15 127.0.0.1 TCP_MEM_HIT/200 3744 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071213pa
risNEW.jpg MYUSERNAME NONE/- image/jpeg
1198061742.179      9 127.0.0.1 TCP_IMS_HIT/304 347 GET
http://ad.aftonbladet.se/RealMedia/ads/Creatives/TFSMflashobject.js
MYUSERNAME NONE/- application/x-javascript
1198061742.188      8 127.0.0.1 TCP_IMS_HIT/304 353 GET
http://ad.aftonbladet.se/RealMedia/ads/Creatives/OasDefault/WTV_unibet_3
7742//jubileum_180x560_brakskiva9900267.swf MYUSERNAME NONE/-
application/x-shockwave-flash
1198061742.348     56 127.0.0.1 TCP_MEM_HIT/200 4488 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071212pa
risinslag.jpg MYUSERNAME NONE/- image/jpeg
1198061742.353      5 127.0.0.1 TCP_MEM_HIT/200 4488 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071212pa
risinslag.jpg MYUSERNAME NONE/- image/jpeg
1198061743.180    827 127.0.0.1 TCP_MEM_HIT/200 3434 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg MYUSERNAME NONE/- image/jpeg
1198061743.185      0 127.0.0.1 TCP_DENIED/407 2023 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg - NONE/- text/html
1198061743.208      0 127.0.0.1 TCP_DENIED/407 2246 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg - NONE/- text/html
1198061743.249      0 127.0.0.1 TCP_DENIED/407 2023 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg - NONE/- text/html
1198061743.257     49 127.0.0.1 TCP_MEM_HIT/200 3434 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg MYUSERNAME NONE/- image/jpeg
1198061743.265      0 127.0.0.1 TCP_DENIED/407 2246 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg - NONE/- text/html
1198061743.310     37 127.0.0.1 TCP_MEM_HIT/200 3434 GET
http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
ittanskille.jpg MYUSERNAME NONE/- image/jpeg
1198061743.864      0 127.0.0.1 TCP_DENIED/407 2222 GET
http://qstream-wm.qbrick.com/00862/aftonbladet1/Noje/0712/m0nj071219Cloo
ney.wmv - NONE/- text/html
1198061744.569    705 127.0.0.1 TCP_MISS/200 4911 GET
http://qstream-wm.qbrick.com/00862/aftonbladet1/Noje/0712/m0nj071219Cloo
ney.wmv MYUSERNAME DIRECT/194.14.243.158
application/vnd.ms.wms-hdr.asfv1


Kind regards

//Mattias Olsson

Reply via email to