[squid-users] authentication forwarding

Hi everybody,

We want to set up the following configuration

  www
   |
   |
Firewall
   |
Proxy B (e.g. used for user specific URL filtering)
   |
Proxy A (used for splitting private and business web access)
   |
   |
Client

Proxy A and B have to have NTLM authentication.
1st case both Proxies are squid
2nd case proxy A = squid proxy B = some appliance

The transaction flow should like (strong simplified)

1. Client sends http request for www.xyz.com
2. Proxy A denies and sends an request for authentication to the client
3. Client sends user/pwd and Proxy A authenticates the user and provides
OK
4. Origin http request goes forward to Proxy B
5. Proxy B denies and sends an request for authentication to the client
6. ..... and now I do not know what's going on?????.

My questions are:

Does it work, that proxy B is requesting the authentication from the
client again?

If it works, any special configuration for the both squid proxies
required?

If it doesn't work any workaround available (authentication on both
proxies is obligatory)?

Any experiences if proxy B will be some appliance?

Regards

Uwe
Received on Thu Sep 21 2006 - 05:00:13 MDT