Em 24/09/15 10:48, Rafael Maleta Fdez escreveu:
el server de dominio pero no s esi la conf es la correcta la sintax es login=user:pass pero como va eso ????

Hola

Perdí el hilo de lo que estabas haciendo pero te paso la documentación de la autenticación del parámetro cache_peer y ya luego tu ves en que estado estas

        ==== AUTHENTICATION OPTIONS ====
        
        login=user:password
                        If this is a personal/workgroup proxy and your parent
                        requires proxy authentication.
                        
                        Note: The string can include URL escapes (i.e. %20 for
                        spaces). This also means % must be written as %%.
        
        login=PASSTHRU
                        Send login details received from client to this peer.
                        Both Proxy- and WWW-Authorization headers are passed
                        without alteration to the peer.
                        Authentication is not required by Squid for this to 
work.
                        
                        Note: This will pass any form of authentication but
                        only Basic auth will work through a proxy unless the
                        connection-auth options are also used.

        login=PASS      Send login details received from client to this peer.
                        Authentication is not required by this option.
                        
                        If there are no client-provided authentication headers
                        to pass on, but username and password are available
                        from an external ACL user= and password= result tags
                        they may be sent instead.
                        
                        Note: To combine this with proxy_auth both proxies must
                        share the same user database as HTTP only allows for
                        a single login (one for proxy, one for origin server).
                        Also be warned this will expose your users proxy
                        password to the peer. USE WITH CAUTION
        
        login=*:password
                        Send the username to the upstream cache, but with a
                        fixed password. This is meant to be used when the peer
                        is in another administrative domain, but it is still
                        needed to identify each user.
                        The star can optionally be followed by some extra
                        information which is added to the username. This can
                        be used to identify this proxy to the peer, similar to
                        the login=username:password option above.
        
        login=NEGOTIATE
                        If this is a personal/workgroup proxy and your parent
                        requires a secure proxy authentication.
                        The first principal from the default keytab or defined 
by
                        the environment variable KRB5_KTNAME will be used.
        
                        WARNING: The connection may transmit requests from 
multiple
                        clients. Negotiate often assumes end-to-end 
authentication
                        and a single-client. Which is not strictly true here.
        
        login=NEGOTIATE:principal_name
                        If this is a personal/workgroup proxy and your parent
                        requires a secure proxy authentication.
                        The principal principal_name from the default keytab or
                        defined by the environment variable KRB5_KTNAME will be
                        used.
        
                        WARNING: The connection may transmit requests from 
multiple
                        clients. Negotiate often assumes end-to-end 
authentication
                        and a single-client. Which is not strictly true here.
        
        connection-auth=on|off
                        Tell Squid that this peer does or not support Microsoft
                        connection oriented authentication, and any such
                        challenges received from there should be ignored.
                        Default is auto to automatically determine the status
                        of the peer.
        


--
------------
Salu2, Ulinx
"En un problema con n ecuaciones
siempre habrá al menos n+1 incógnitas"
Linux user 366775



______________________________________________________________________
Lista de correos del Grupo de Usuarios de Tecnologías Libres de Cuba.
Gutl-l@jovenclub.cu
https://listas.jovenclub.cu/cgi-bin/mailman/listinfo/gutl-l

Responder a