Re: [squid-users] Authentication not accepted when forwarding requests to a parent proxy server

From: Kinkie <kinkie-squid@dont-contact.us>
Date: Thu, 23 Jun 2005 22:10:05 +0200

On Tue, 2005-06-21 at 21:03 +1200, Tom Barnfield wrote:
> I have added the lines below to my squid conf file:
>
> cache peer <IP address of parent proxy server> parent 3128 0 no-query
> default
> acl all src 0.0.0.0/0.0.0.0
> never_direct allow all
>
> With these lines added, the requests do appear to be directed to the parent
> proxy and the authentication window for the parent pops up. When the
> username and password are entered and OK is clicked, the authentication
> window pops up again. The user never gets past the authentication request.
>
> If I remove the 3 lines above, the local caching server works OK, without
> going through the authenticating parent.

That's by design of the HTTP protocol: proxy chaining was not taken into
consideration when designing authentication.

To pass on credentials to the upstream proxy you can use the
"login=PASS" configuration option in squid 3.0, not sure about squid
2.5.

        Kinkie
Received on Thu Jun 23 2005 - 14:10:09 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Jul 01 2005 - 12:00:03 MDT