Re: AW: [squid-users] Users Authentication on the second proxy of a chain

On Tue, 2001-09-11 at 19:27, Michael Meiszl wrote:
> > Hi all,
> >
> > Let's consider the following architecture :
> >
> > User --- Squid1 --- Squid2 --- Internet
> >
> > In this architecture, two Squid proxies are chained. Imagine that you want
> > to perform user authentication on the second proxy Squid2 (and eventually
> > access control and URL filtering based on the identity of the user and
> > SmartFilter).
> You can, but I would recommend Authentication on Squid1
> >
> > Is it possible with Squid?!? How does it work? Can I still perform proxy
> > authentication between the two proxies?
> Yes and no.
> If Users are authenticated on S1, S1 can authenticate to S2.
> Else S1 needs to be transparent, so that S2 can check the user accounts.
> MAM
>

Actually, the 1st proxy does _not_ need to be intercepting. Simply do
not define proxy_auth acl's and squid will pass the authentication
headers on untouched.

Rob
Received on Tue Sep 11 2001 - 05:41:44 MDT