Squid proxy authentication issues...

[evan_a]

Anyone out there running a squid proxy server with authentication? Going grey trying to get this to work.

I'm trying to get internet access reporting set up for the 40+ computers at the gold mine I moonlight for. I'm running Fedora 8 with Squid 3.0 downloaded and installed via yum.

I've set up and tested the authentication helper squid_ldap_auth to authenticate users against the existing Novell eDirectory there, and I know that this process works: I test it against my username and get an OK, not an ERR. Everything else is set up based on the authentication defaults specified in the squid man pages. The proxy works on IP ranges fine, however as soon as I elevate the http_access allow <proxy_auth_acl_name> line above the one that allows access to the IPs in the squid.conf file, I get a 407 denied error. It's like the browser isn't being told to display the login box.

If anyone's interested I can post log and .conf snippets.

Long shot I know, +rep to any helpful replies...

 

[Adunaphel]

Don't.

Squid auth sends username and password plaintext across the network with every http request done by a client. I sincerely doubt you want to do that, especially when linking to the eDir username database.