[squid-users] help with reverse proxy sending user to peer

[jmperrote]

Thanks a lot Amos, a try to use this for testing.


Regards.


El 16/5/19 a las 06:24, Amos Jeffries escribió:
> On 16/05/19 3:26 am, jmperrote wrote:
>> Hello Amos, we use
>>
>> --> auth_param basic program ...../.../auth.php
>>
>> for authenticate teh user to the reverse proxy.
>
> auth_param is full HTTP authentication. So the %ul code is what you need
> to use in your custom header value for username from that helper.
>
>
> The %ue is for the external_acl_type helpers output. "user name" is
> different from "username" - the single space may seem pedantic but with
> security the minor distinction can mean vast differences in risk.
>
> The label in %ue is authorized, but not guaranteed to be valid. Whereas
> %ul is authenticated and thus guaranteed valid.
>
> Amos