> >Hi list,
> >
> >I have activated the authentification via smb_auth in our
> >Squid 2.5 on SuSE SLES9. It works very fine, but sometimes
> >while running a special online application based on Java
> >another login-window appears after loading the page.
> >The user is already logged in and works on any side, but
> >after connecting to the application-side, another login-
> >screen (showen as java-login-screen, not the first login-
> >screen of windows-explorer) appears, and the user have
> >to login again. Sometimes working with the application
> >another login appears. So the user is getting wild :-(
> >Is it an known problem ?
> >The loginscreen looks like a javawindow and needs the
> >information of the samba-account. So it is not a bug
> >of the application.
> >
> >Hope someone can help me to fix this problem, thanxx
> >a lot for any reply ...
>
> This is not a Squid bug: Internet Explore and the Sun JVM don't share user
> authentication, and, as i know, Sun JVM use only basic authentication.
>
> You can use the following workaround:
>
> acl java_jvm browser Java/1.4
> http_access allow java_jvm
>
> But be careful: this allow any unauthenticated Java traffic !!!
>
Hi
I tried to add the workaround to my squid.conf, but I have got
problems while integrating it, to some exisiting acls:
acl INSIDE_IP dst 192.168.1.0/24
acl proxylogin proxy_auth REQUIRED
acl proxy_access src "/etc/allowed_networks"
acl java_jvm browser Java/1.4
acl GET method GET
.
.
.
never_direct allow INSIDE_IP
http_access allow proxylogin proxy_access java_jvm
http_access allow localhost
http_access deny all
never_direct allow all
But now, I cant connect to the internet. How do I have
to add the ACL to my config, that the other two restrictions:
"proxylogin and proxy_access" work too ?
--
Regards,
Jens Strohschnitter
-------------------------------------
*!!!LINUX LINUX LINUX LINUX LINUX!!!*
* http://www.jens-strohschnitter.de *
-------------------------------------
Set the controls for
the heart of the sun
-------------------------------------
