[squid-users] Squid3 authentification proxy and method CONNECT SSL

Alexandre Magnat alexandre.magnat at mecaprotec.fr
Wed Jul 1 08:55:38 UTC 2015


Hello,

I use Squid3 (3.1.20) with Squidguard filtering linked with an user 's 
authentication  on a OpenLDAP.
But, recurrently, Firefox, Thunderbird, Chrome (certainly IE) ask again 
frequently the login and password in a popup.

It seem, the popup authentication appear when the browser try a request 
on a CONNECT method like this:
172.16.1.215 - - [01/Jul/2015:10:40:18 +0200] "CONNECT 
fhr.data.mozilla.com:443 HTTP/1.1" 407 3812 TCP_DENIED:NONE
or like this:
172.16.1.207 - - [01/Jul/2015:10:39:40 +0200] "CONNECT 
safebrowsing.google.com:443 HTTP/1.1" 407 3824 TCP_DENIED:NONE


But, I think, I have configured correctly Squid3 for accept this kind of 
request:

acl SSL_ports port 443
acl CONNECT method CONNECT
http_access deny CONNECT !SSL_ports


It's a boring problem for my user to have 4 or 5 times per day this kind 
of popup :-(
Anybody have an idea for helping me to resolve this ?



-- 
Cordialement,
Alexandre Magnat
Ingénieur Systèmes

MECAPROTEC Industries
34, Boulevard de Joffrery
BP 30204 – 31605 MURET Cedex
Tél: +33(0)5.61.51.85.92



More information about the squid-users mailing list