Re: [squid-users] Multiple squid servers + ldap authentication + wccp or "Super Proxy Script"

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Sat, 21 Apr 2007 13:19:19 +0200

ons 2007-04-18 klockan 17:14 +0700 skrev chowalit.lab Chowalit Lab
Linux:

> As I know (Sorry if I have some miss-understanding), It's the same
> result if I implement either wccp or WPAD. There are difference in
> client setting up. Client don't need to set anything on browser but
> WPAD need.

No,

WCCP is transparent interception, violating RFCs etc. Here
authentication won't work.

WPAD is automatic discovery of the proxy (or to be exact automatic
discovery of the PAC file telling the browser how it should use
proxies). As the browser knows it's using a proxy and no RFCs violated
there is no problem with proxy authentication.

> Sorry I'm not clear. However, as Chris claimed that HA is not fix this problem.
> Please explain clearly.

A load balanced proxy address solves a problem with basic proxy
authentication. Basic proxy authentication is performed per proxy host
name, and as a result PAC based solutions may result in multiple
authentication prompts during the browsing session, one per proxy used.
The load balancer solution where the browser always goes to the same
load balanced proxy address avoid this.

Regards
Henrik

Received on Sat Apr 21 2007 - 05:19:24 MDT

This archive was generated by hypermail pre-2.1.9 : Tue May 01 2007 - 12:00:01 MDT