Below should help.  If you have more specific questions about squid, I
would check their documentation as they explain it pretty well on how to
do external authentication.

Here is a brief overview on how you can setup squid to use radius
authentication.

In squid.conf under the auth_param section, add something to point to your
external radius authentication module.  You should search the web for one
that does radius, I found one that is a perl script that works well.
http://www.devet.org/squid/proxy_auth/contrib/auth.pl

example config:
auth_param basic program /usr/local/bin/rad_auth.pl

Then in your ACL configuration, you put a line to tell it to require
authentication
acl password proxy_auth REQUIRED

Then you add that ACL to your http_access statement
http_access allow password

Now your squid proxy should prompt users for authentication which will
then be sent over to radius.

You then configure radius to authenticate the users.  Make sure you add
the IP of your proxy server and the secret you define in the perl script
to the clients.conf file.

Hope that helps

Dusty Doris


On Thu, 2 Sep 2004, jassim El-mansori wrote:

> hello guys
> i have freeradius running on RH9 and I'm using pGina
> and RADIUS plug-in and they work like a charm
> now i need the user that was successfully
> authenticated brows the Internet
> i believe squid will do and i about to finish
> configuring it
> the question is how i can point them to each other so
> the allowed user can browse the Internet
> do i need to point radius to squid or the opposite I'm
> really confused to implement this..
> any help is appreciated
> thank u
> jasem
>
>
>
> _______________________________
> Do you Yahoo!?
> Win 1 of 4,000 free domain names from Yahoo! Enter now.
> http://promotions.yahoo.com/goldrush
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to