On Mon, 16 Jan 2006, Emilio Casbas wrote:
Is possible implement CAS in a environment with squid? http://www.ja-sig.org/wiki/display/CAS/Home
Not easily unless you are talking about using Squid as a reverse proxy / accelerator.
The problem is that there is no equivalence of Cookies to proxies.
It is possible to tweak the HTTP protocol slightly and use the web server cookies, but this requires issuing a new ticket for each domain visited and extending the Squid code to be able to filter out this "Squid" cookie before the request is forwarded to the requested server.
Another method is to associate the user information with the IP address of the client. This can be done without extending the Squid core (just a matter of writing the proper external acl helpers), but won't work very well if you have multiuser stations or users behind masquerading NAT making several users come from the same IP address to the proxy.
Regards HEnrk
