On Mon, 16 Jan 2006, Emilio Casbas wrote:
> Is possible implement CAS in a environment with squid?
> http://www.ja-sig.org/wiki/display/CAS/Home
Not easily unless you are talking about using Squid as a reverse proxy /
accelerator.
The problem is that there is no equivalence of Cookies to
proxies.
It is possible to tweak the HTTP protocol slightly and use the web server
cookies, but this requires issuing a new ticket for each domain visited
and extending the Squid code to be able to filter out this "Squid" cookie
before the request is forwarded to the requested server.
Another method is to associate the user information with the IP address of
the client. This can be done without extending the Squid core (just a
matter of writing the proper external acl helpers), but won't work very
well if you have multiuser stations or users behind masquerading NAT
making several users come from the same IP address to the proxy.
Regards
HEnrk
Received on Sat Feb 11 2006 - 05:08:27 MST
This archive was generated by hypermail pre-2.1.9 : Wed Mar 01 2006 - 12:00:03 MST