Re: [squid-users] Transparent Proxy and Authentication

2013-02-23 Thread Roman Gelfand
yep, it is an ip based authentication. On Fri, Feb 22, 2013 at 8:40 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 23/02/2013 8:48 a.m., Roman Gelfand wrote: Please, consider the network topology below. I could always configure outgoing http traffic on the firewall to authenticate with

Re: [squid-users] Transparent Proxy and Authentication

2013-02-23 Thread Amos Jeffries
On 24/02/2013 4:35 p.m., Roman Gelfand wrote: yep, it is an ip based authentication. Ah. Which is not authentication. But authorization. Squid can also do that in transparent mode. The limitation is only about use of HTTP auth headers on intercepted traffic. You simply configure an

Re: [squid-users] Transparent Proxy and Authentication

2013-02-22 Thread Roman Gelfand
Please, consider the network topology below. I could always configure outgoing http traffic on the firewall to authenticate with firewall user. How is this different from having squid authenticate in transparent mode? WAN

Re: [squid-users] Transparent Proxy and Authentication

2013-02-22 Thread Amos Jeffries
On 23/02/2013 8:48 a.m., Roman Gelfand wrote: Please, consider the network topology below. I could always configure outgoing http traffic on the firewall to authenticate with firewall user. How is this different from having squid authenticate in transparent mode? That is a good question.

[squid-users] Transparent Proxy and Authentication

2013-02-20 Thread Roman Gelfand
I guess the 2 don't mix as per NOTICE: Authentication not applicable on intercepted requests. message. Would it follow user access control via transparent proxy? or is there a way around the above limitation? Thanks in advance

Re: [squid-users] Transparent Proxy and Authentication

2013-02-20 Thread Amos Jeffries
On 21/02/2013 4:42 a.m., Roman Gelfand wrote: I guess the 2 don't mix as per NOTICE: Authentication not applicable on intercepted requests. message. Would it follow user access control via transparent proxy? or is there a way around the above limitation? Please read the Interception Proxy

RE: [squid-users] Transparent Proxy ntlm authentication issue

2011-10-04 Thread Almighty
. No problems, Im having a looking at NoCatSplash (catch-and-release) software to see if this will work. Thanks again. -Original Message- From: Alex Crow [mailto:a...@nanogherkin.com] Sent: 03 October 2011 17:57 To: squid-users@squid-cache.org Subject: Re: [squid-users] Transparent Proxy ntlm

Re: [squid-users] Transparent Proxy ntlm authentication issue

2011-10-04 Thread Amos Jeffries
On 05/10/11 03:36, Almighty wrote: Thanks for that Alex. I have used wpad in the past but I had to ensure that the browsers had Automatically detect settings ticked. It's for a wireless network so they are not on our domain. We purely use NTLM for authentication and verification that they are

[squid-users] Transparent Proxy ntlm authentication issue

2011-10-03 Thread Almighty
Hi, I am redirecting my clients to my proxy server transparently using IPTABLES, -A PREROUTING -p tcp -m tcp -i eth0 --dport 80 -j REDIRECT --to-ports 8080 I am also using ntlm authentication that forces all connections to authentication to AD. The redirect works fine except squid says Cache

Re: [squid-users] Transparent Proxy ntlm authentication issue

2011-10-03 Thread Alex Crow
Almighty, You can't do transparent and NTLM auth together, as in order to do NTLM the browser must be configured to know it's using a proxy. Unless, as your handle suggests, you are indeed omnipotent ;-) This question and ones like it come up a lot - and there is a simple solution if you

Re: [squid-users] transparent proxy with authentication

2005-11-09 Thread Chin Kah Yi
: Chin Kah Yi [EMAIL PROTECTED] To: Henrik Nordstrom [EMAIL PROTECTED], Squid Users squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 8/11/2005 21:53 Thanks for the comment. I was away for a while. You have mentioned that such authentication

Re: [squid-users] transparent proxy with authentication

2005-11-09 Thread Henrik Nordstrom
On Wed, 9 Nov 2005, Chin Kah Yi wrote: Are there anyone out there who has configured squid to perform this kind of cacheing before? i.e. squid on wccp with cisco router while providing http authentication to end-users. No. If there is none and I wish doing so, would it really be possible?

Re: [squid-users] transparent proxy with authentication

2005-11-08 Thread Chin Kah Yi
? Kah Yi Original Message From: Henrik Nordstrom [EMAIL PROTECTED] To: Chin Kah Yi [EMAIL PROTECTED] CC: Squid Users squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 29/10/2005 02:22 On Fri, 28 Oct 2005, Chin Kah Yi wrote: I see. Do

Re: [squid-users] transparent proxy with authentication

2005-11-01 Thread Senthil Murugan
Hello Henrik, I understood your explanation like this. client - proxy Internet The Scenario is Transparent proxy Authentication using Cookies, and all the traffics are passed through the proxy. When the user access a web page for the first time, he is redirected to a login page say

Re: [squid-users] transparent proxy with authentication

2005-10-28 Thread Henrik Nordstrom
On Fri, 28 Oct 2005, Chin Kah Yi wrote: I see. but if it is transparent proxy via wccp, how would the IP based access control scheme work on bluecoat as bluecoat wouldn't be inline to do access control and depending on cisco router? It is inline for HTTP traffic. The proxy can do whatever

Re: [squid-users] transparent proxy with authentication

2005-10-28 Thread Chin Kah Yi
PROTECTED], squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 28/10/2005 19:14 On Fri, 28 Oct 2005, Chin Kah Yi wrote: I see. but if it is transparent proxy via wccp, how would the IP based access control scheme work on bluecoat as bluecoat wouldn't

Re: [squid-users] transparent proxy with authentication

2005-10-28 Thread Senthil Murugan
-users@squid-cache.org Sent: Friday, October 28, 2005 7:12 PM Subject: Re: [squid-users] transparent proxy with authentication I see. Do you think the design where cookies were used to keep track of per-user authentication details at client browser is a feasible and good design? Original

Re: [squid-users] transparent proxy with authentication

2005-10-28 Thread Henrik Nordstrom
On Fri, 28 Oct 2005, Chin Kah Yi wrote: I see. Do you think the design where cookies were used to keep track of per-user authentication details at client browser is a feasible and good design? It is a hack. And fails badly for all other applications than browsing as it is not a standard

Re: [squid-users] transparent proxy with authentication

2005-10-28 Thread Henrik Nordstrom
On Fri, 28 Oct 2005, Senthil Murugan wrote: I just wanted to know how cookies are used for storing the username and passwd. Bcos, i heard that cookies are domain dependent. So how cum it works or am i wrong The cookies are indeed domain dependent, but since the proxy has full control of

Re: [squid-users] transparent proxy with authentication

2005-10-27 Thread Chin Kah Yi
@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 27/10/2005 09:30 On Tue, 25 Oct 2005, Chin Kah Yi wrote: http://www.squid-cache.org/Doc/FAQ/FAQ-17.html#ss17.16 that authentication does not work with wccp. And I read somewhere in squid 3 development site

Re: [squid-users] transparent proxy with authentication

2005-10-27 Thread Henrik Nordstrom
On Thu, 27 Oct 2005, Chin Kah Yi wrote: If wccp with authentication does not work because of wccp design, Bluecoat claimed their proxy supports wccp with authentication. I wonder how theirs work? It doesn't actually. They do what you can do, implement a IP based access control sheme using

Re: [squid-users] transparent proxy with authentication

2005-10-27 Thread Chin Kah Yi
PROTECTED] CC: Henrik Nordstrom [EMAIL PROTECTED], squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 28/10/2005 00:57 On Thu, 27 Oct 2005, Chin Kah Yi wrote: If wccp with authentication does not work because of wccp design, Bluecoat claimed

Re: [squid-users] transparent proxy with authentication

2005-10-27 Thread Chin Kah Yi
? Original Message From: Chin Kah Yi [EMAIL PROTECTED] To: Henrik Nordstrom [EMAIL PROTECTED], squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 28/10/2005 08:39 I see. but if it is transparent proxy via wccp, how would the IP based access control

Re: [squid-users] transparent proxy with authentication

2005-10-26 Thread Henrik Nordstrom
On Tue, 25 Oct 2005, Chin Kah Yi wrote: http://www.squid-cache.org/Doc/FAQ/FAQ-17.html#ss17.16 that authentication does not work with wccp. And I read somewhere in squid 3 development site that there is an intention to enable such possibility, I like to know if this is true. You have

Re: [squid-users] transparent proxy with authentication

2005-10-26 Thread Henrik Nordstrom
On Mon, 24 Oct 2005, Merton Campbell Crockett wrote: Obviously, this leads to a condition where the HTTP client needs to supply multiple credentials on every access. It is important to note that not all HTTP clients are browsers (Firefox, Internet Explorer, Netscape, Safari, etc.). Many are

Re: [squid-users] transparent proxy with authentication

2005-10-26 Thread Henrik Nordstrom
On Tue, 25 Oct 2005, Chin Kah Yi wrote: What if the design is changed from wccp to a redirection level7 switch such as foundry serveriron? L7 switch redirect http traffic to squids. Will this be able to design provide authentication from squid? If you use a L7 load balancer with the

[squid-users] transparent proxy with authentication

2005-10-24 Thread Chin Kah Yi
Dearest squid expert out there, I have had squid boxes running on wccp with cisco router for my customer. There are 2 new requirements lately: (1) authentication with wccp There comes a new requirement from my customer that every user should be authenticated before being allowed to browse the

Re: [squid-users] transparent proxy with authentication

2005-10-24 Thread Chin Kah Yi
in computer labs where anyone can use to access to internet. If you do have alternative control mechanism, please advise. Thanks again. Kah Yi Original Message From: Merton Campbell Crockett [EMAIL PROTECTED] To: squid-users@squid-cache.org Subject: Re:[squid-users] transparent

Re: [squid-users] transparent proxy with authentication

2005-10-24 Thread Merton Campbell Crockett
Crockett [EMAIL PROTECTED] To: squid-users@squid-cache.org Subject: Re:[squid-users] transparent proxy with authentication Date: 25/10/2005 10:47 On Monday 24 October 2005 18:36, Chin Kah Yi wrote: Dearest squid expert out there, Don't mind me being asking again - but why was authentication

[squid-users] Transparent Proxy with Authentication

2004-12-03 Thread Focuz Infotech
Hai All, If there is any way to setup transparent proxy with authentication please give me those... here i can setup transparent proxy and authentication but it didn't work same time... (while i use transparent it didn't ask for authentication) i want to use both in same time.. so help

Re: [squid-users] Transparent Proxy with Authentication

2004-12-03 Thread Matus UHLAR - fantomas
On 03.12 14:25, Focuz Infotech wrote: Hai All, If there is any way to setup transparent proxy with authentication please give me those... here i can setup transparent proxy and authentication but it didn't work same time... (while i use transparent it didn't ask for authentication)

RE: [squid-users] Transparent Proxy with Authentication

2004-12-03 Thread Elsen Marc
Hai All, If there is any way to setup transparent proxy with authentication please give me those... here i can setup transparent proxy and authentication but it didn't work same time... (while i use transparent it didn't ask for authentication) i want to use both in same

[squid-users] transparent proxy and authentication

2003-08-05 Thread Chettawan Senapant.
I have some Idea about transparent proxy with authentication but I don’t sure it makes sense or not, may be some one can craft this. I’m using backbone switch to route HTTP request to transparent squid and it works fine. I know that no way (by now) to automatically pop up authen screen for routed

Re: [squid-users] transparent proxy and authentication

2003-08-05 Thread Ilker Gokhan
On Tue, 2003-08-05 at 10:30, Chettawan Senapant. wrote: Im using backbone switch to route HTTP request to transparent squid and it works fine. I know that no way (by now) to automatically pop up authen screen for routed users while Im using transparent proxy. But suppose I have some firewall