[squid-users] Removing cache credentials

[Amos Jeffries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 15/11/2014 5:21 p.m., santosh wrote:
> Hello Team,
> 
> I have set-up squid proxy server with ldap authentication , the 
> infrastructure is setup in such a way that users have to access the
> internet through the proxy .In Internet explorer there's an option
> to save the credntials and once its saved during the prompt squid
> wont ask for credentials the user will have direct access to
> internet .

Wrong and wrong.
HTTP (thus Squid) is stateless. Each and every single request requires
the credentials necessary to pass that request through the proxy.

Whenever the credentials are missing or invalid Squid WILL ask. The
browser and only the browser can decide what credentials (if any) are
sent on the request.

> I understand this is an browser issue is there a way in squid which
> can prevent the caching of credentials

Do you have a time machine? The browser actions happen long before
Squid ever hears about the credentials for the first time.

> or give a timeout so that the user is prompted to reauthenticate 
> from squid . I have searched on web all i get is help on disabling
> the credential cache of windows .

Re-authenticate is another matter. The only way to do this is to tell
the browser the credentials it is sending are invalid.

Timeout is one way to trigger re-authentication. Validity TTL is the
business of the background authentication system you are using to
check the credentials validity (the auth helper).


So why are you trying to force frustration and annoyance on your users?

Amos

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUZuR2AAoJELJo5wb/XPRj9fUH/RQBEu/whtwjCWuQHjujyREo
HXWjrKKgVM/yXccgYhozJryCuFbErJgQLHit8IoKOFFO1/e6tWSq0xc5dB+KUtag
KY1Ugg5AxveVJmGKak/QV4h0+JHL5s8xX4pjEYRk1EY/H7ScIob2/LtphHQMEUWv
ikSy7rEGlGF9mgOjF4mIZDPwqhKCssgdu0hA9YNShHjX2o+jqlaQVV/J1A1qI/BR
jbmKP+QH0Bf1h/zIDe1CAOhqSAZFiAEJ+MidxevPwQzA6ovgFH+4yJbZNnt+cvVt
MHzS/Wbut1o/UWgJ0CrXtrhNkPJRByRBKxo3e5IVaYaDOJZ/ok4Pc6qwKR2skhc=
=AYUH
-----END PGP SIGNATURE-----