Re: [squid-users] Howto share squid and apache authentification

Henrik Nordstrom a écrit:
> What you can maybe do is to have your web login application save the
> users IP address, and then tell Squid that this IP address is not
> allowed to go to the Internet..
>
> Regards
> Henrik
>
> mån 2003-01-20 klockan 18.04 skrev Fabien Salvi:
>
>>Hello,
>>
>>We would like for an intranet people to authenticate only once to have
>>access on private website (in the Intranet) and to access all the Internet.
>>
>>So, when they start their browser, they will load a login page and only
>>put once their username/password and are authenticate in apache (in our
>>web application session) and automatically.
>>
>>In fact, we search a way to get the "Proxy-Authorization" from apache or
>>vice-versa...
>>
>>I hope I'm not too confusing...

Thanks for your help, Henrik !

Well, finally, I wasn't clear enough :)
In fact, I don't want to prevent users from going on Internet.
I just want them to be authenticated.

For example, let's take 2 users, foo and bar
foo and bar can be logged on the intranet and they can access our
private resources.
Now, they both want to access internet web sites.
But, access is protected by an authentication so not everybody can use
Internet.
foo is allowed to go on Internet but not bar.

Well, it's simple to do with authenticate functions in squid.
But, when foo is going on Internet, he must give username/password one
more time.

We would like to simplify this but getting user/password from previous
authentication (when he was logging on the Intranet).
Something like http://user:password@www.myweb.site/
Is it possible ?

If not, a solution is like you suggest, to tell squid what IP is allowed
to use squid.

But, I suppose this need squid to be reloaded, isn't it ?
Like we also use squidGuard as redirector, it may be not a good solution
... (load, etc???).

Thanks a lot for your help !

B.R.

-- 
Fabien SALVI      Centre de Ressources Informatiques
                   Archamps, France -- http://www.cri74.org
                   PingOO GNU/linux distribution : http://www.pingoo.org