[squid-users] explicit forward proxy to server requring client authentication

Matus UHLAR - fantomas uhlar at fantomas.sk
Wed May 18 06:57:46 UTC 2016


On 17.05.16 18:10, zodyo wrote:
>I have same problem here, client cant login to a server with auth like LDAP
>via transparent/static squid.
>i have try with lusca and the newer squid 3.5.17

how can this be the same problem? It's very different problem.


when talking about "transparent" proxy, you apparently mean "intercepting"
proxy - client tries to connect to a server, but the connection is
redirected to proxy.

Now, the client can _not_ log onto a proxy, if it believes it connects to
the server, not to the proxy - it does not know there's a proxy.

You must configure proxy (explicitly, or using WPAD protocol) if you want
your clients to authenticate on them.

Or, you must use out-of-band authentication protocol (external program that
will check who is the client, e.g. who is logged on the client computer.
-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Save the whales. Collect the whole set.


More information about the squid-users mailing list