Re: [squid-users] enabling X-Authenticated-user

On Wed, Mar 07, 2012 at 11:58:31PM +1300, Amos Jeffries wrote:
>
> cache_peer_access is a "fast" group access list. This is why suggested
> never/always _direct lists for the testing.
>

Yep, me being dumb :) I did as you suggested and used the never_direct
deny and my debug lines in the external helper fire _but_ there are two
dumb things happening:

1) The credentials being passed to the upstream are not rewritten - if I
decode the basic auth it has my real password going to the upstream.

2) For some unknown (to me) reason the upstream is prompting for auth
even though the basic auth header is there. It does not do this if I
have login=*:password but if I set login=PASS the upstream prompts.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."