[squid-users] IP based user identification/authentication

Andrey K ankor2023 at gmail.com
Thu Dec 7 02:34:31 UTC 2023


Hello,

I was interested if I can configure some custom external helper that will
be called before any authentication helpers and can perform user
identification/authentication based on the client src-IP address.
It can look up in the external system information about the user logged in
to the IP address and return the username and some annotation information
on success.
If the user has been identified, no subsequent authentications are required.
Identified users can be authorized later using standard squid mechanisms
(for example, ldap user groups membership).

This feature can be especially useful in "transparent" proxy configurations
where 407-"Proxy Authentication Required" response code is not applicable.

Kind regards,
    Ankor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20231207/8fbbddb9/attachment.htm>


More information about the squid-users mailing list