Re: [squid-users] config of squid to use external proxy

----- Mensagem Original-----
De: Clemente Aguiar <clemente.aguiar_at_madeiratecnopolo.pt>
Para: Amos Jeffries <squid3_at_treenet.co.nz>
Cc: squid-users_at_squid-cache.org
Assunto: Re: [squid-users] config of squid to use external proxy
Data: Thu, 28 Jan 2010 15:15:43 +0000

Sex, 2010-01-29 às 03:32 +1300, Amos Jeffries escreveu:
> Clemente Aguiar wrote:
> > I want to config my transparent squid to use an external proxy (with
> > user/password) authentication when accessing a specific set of sites.
> >
> > At present the situation is as follows:
> > When I want to access a specific site, say www.example.com, I am
> > required to set my browser proxy settings to use an external proxy, for
> > instance proxy.external.com port 8080, and then I am required to enter a
> > user and password. Basically the site www.example.com is only accessible
> > through this proxy which is external to our site.
> >
> > On our site we have our own squid box configured as transparent cache
> > (using WCCPv2), so what I would like is to be able to access
> > www.example.com (transparently), i.e. without having to change my
> > browser proxy settings.
> >
> > Can anybody help me with the squid config?
> >
>
> Two possible solutions:
>
> 1) requires a single login using Basic auth to the parent. shared by all
> users of the child proxy.
> cache_peer .... login=Username:Password
>
> 2) permits for a variation of usernames, but Password is not
> retrievable. Requires a helper that returns "OK user=Foo" when handed an
> IP address and th parent proxy to accept the same password fro all users
> (anonymous login with username tracking )
>
> external_acl_type ...
> cache_peer ... login=PASS
> or
> external_acl_type ...
> cache_peer ... login=*:FixedPassword
>
>
> Amos

Thanks.

I tried this and it seems to work.
Is this correct?

cache_peer proxy.external.com parent 8080 0 no-query login=user:pass
acl example_acl dstdomain .example.com
cache_peer_access proxy.external.com allow example_acl
never_direct allow example_acl
Received on Thu Jan 28 2010 - 15:22:04 MST