Clemente Aguiar wrote:
----- Mensagem Original-----
De: Clemente Aguiar <clemente.agu...@madeiratecnopolo.pt>
Para: Amos Jeffries <squ...@treenet.co.nz>
Cc: squid-users@squid-cache.org
Assunto: Re: [squid-users] config of squid to use external proxy
Data: Thu, 28 Jan 2010 15:15:43 +0000
Sex, 2010-01-29 às 03:32 +1300, Amos Jeffries escreveu:
Clemente Aguiar wrote:
I want to config my transparent squid to use an external proxy (with
user/password) authentication when accessing a specific set of sites.
At present the situation is as follows:
When I want to access a specific site, say www.example.com, I am
required to set my browser proxy settings to use an external proxy, for
instance proxy.external.com port 8080, and then I am required to enter a
user and password. Basically the site www.example.com is only accessible
through this proxy which is external to our site.
On our site we have our own squid box configured as transparent cache
(using WCCPv2), so what I would like is to be able to access
www.example.com (transparently), i.e. without having to change my
browser proxy settings.
Can anybody help me with the squid config?
Two possible solutions:
1) requires a single login using Basic auth to the parent. shared by all
users of the child proxy.
cache_peer .... login=Username:Password
2) permits for a variation of usernames, but Password is not
retrievable. Requires a helper that returns "OK user=Foo" when handed an
IP address and th parent proxy to accept the same password fro all users
(anonymous login with username tracking )
external_acl_type ...
cache_peer ... login=PASS
or
external_acl_type ...
cache_peer ... login=*:FixedPassword
Amos
Thanks.
I tried this and it seems to work.
Is this correct?
cache_peer proxy.external.com parent 8080 0 no-query login=user:pass
acl example_acl dstdomain .example.com
cache_peer_access proxy.external.com allow example_acl
never_direct allow example_acl
Yes
Amos
--
Please be using
Current Stable Squid 2.7.STABLE7 or 3.0.STABLE21
Current Beta Squid 3.1.0.15
