Re: [squid-users] Passing ident information as proxy_auth user to upstream cache

From: Al Kirkus <al@dont-contact.us>
Date: Mon, 9 Apr 2007 14:25:11 -0500

Hi Henrik,

First thanks for the response!!

Second, could you possibly point me in the right direction on setting
up an external acl helper to loop back around the ident information
as a login? I understand how you can allow/deny something via an
external acl but how would you bring back a value of other than OK/
ERR and use that as part of a proxy login to a parent cache
(dansguardian in this case)?

I have already been hacking the source and found myself stumped so I
thought I would look at the more compatible (and hopefully simpler)
of the 2 options first.

Thanks for the help!!

Al

On Apr 4, 2007, at 4:47 PM, Henrik Nordstrom wrote:

> ons 2007-04-04 klockan 14:58 -0500 skrev Al Kirkus:
>
>> I have already setup 1 and 2 and they work as expected. Squid1 will
>> pass the prompted authentication upstream to DG but if squid1 applies
>> the ident ACL, that information is not seen/understood by the
>> upstream DG.
>
> Right. The login= option do not pass ident information.
>
> You should be able to loop back the ident information as a login
> via an
> external acl helper, or alternatively it may be possible to modify the
> Squid sources to consider ident a valid username source for the login=
> option.
>
> Regards
> Henrik
Received on Mon Apr 09 2007 - 13:25:25 MDT

This archive was generated by hypermail pre-2.1.9 : Tue May 01 2007 - 12:00:01 MDT