RE: [squid-users] Need Help here

Hi Gerard,

You know, you really have shed some hope on this.
I have the basic auth configured right and working.
But after the user authenticate themself to the squid,
they got an error message if they visit that server.

I don't why, normally I do not need https to go
to that server but it worked. It worked - means if I
use https to get to the same page, it correctly prompted
the me for the password and let me pass. Unfortunately,
a lot of other feature would not work and the page is not
displayed correctly.

I was hoping there is something we can do on the squid configuration
to get this fixed. As I wrote email to them asking them to change
the authentication method, they don't know what I am refering to.
(Me neither.)

Regards,
Sherman

>===== Original Message From Gerard Eviston <geviston@bigpond.net.au> =====
>On Wed, 27 Nov 2002 20:06, Wong, Sherman wrote:
>> I have read enough discussion regarding the authentication.
>> But I could not find answer to my question.
>>
>> Pls correct me if I am wrong. Is the authentication method
>> basic, smb, ntlm, digest are really for authenticating users
>> TO THE SQUID server so that they are able to use the cache??
>>
>> If they are, I think I have one big missing piece of the puzzle that
>> what does that play to authenticate users to the DESTINATION web
>> server.
>>
>
>
>HTTP allows for a client to authenticate to a proxy server and a web server
in
>the same request (using seperate headers). Basic, NTLM and Digest can be used
>for proxy authentication and web server authentication. The catch is that
>NTLM can't be used through a proxy server because it cannot cope with a
>decoupled client-server connection. Any other combination should work.
>
>
>> I have mission critical server located at overseas offices that needs to be
>> authenticated. But the IIS won't let users in while the squid is in the
>> middle and
>> I heard about ntlm could solve the problem but I could not get the ntlm
>> working.
>>
>
>If you enable basic authentication on the web server then everything should
be
>OK.
>
>Hope this helps
>Gerard
Received on Wed Nov 27 2002 - 06:45:13 MST