mån 2006-07-03 klockan 13:06 +0700 skrev RdBSD: > before i have squid 2.5.stable 13 and then i want to transparent and > get authentication in each user who's connected to internet using > their browser. Not possible I am afraid. This is not something you can do in a proxy using proxy authentication. You will need to implement a separate authentication system keeping track of your users and reporting the user name to Squid via external_acl_type.. > And then i found squid2.6 stable which support > auth-on-accell. Yes, but it's litterally what it says. Authentication in accelerator mode infront of YOUR web servers under your administrative control, not when transparently intercepting traffic to other web servers. Proxy authentication requires the browser to be configured to use the proxy. Authentication in accelerator mode is web server authentication, unique to each web server and for that web server only. > my problem is howto make transparent proxy in squid > 2.6stable ?. Similar to 2.5, except that you use the word transparent in the http_port line instead of the "httpd_accel_host virtual" thing one used in 2.5.. But unfortunately a small bug crept in into 2.6.STABLE1 in the transparent interception mode. See bug #1650. > http_port ip-proxy:3128 transparent vhost vport=80 defaultsite=virtual > protocol=http > cache_peer ip-sibling sibling 8080 3130 no-query originserver This is a typical reverse proxy setup, not transparent proxy.. A transparent proxy setup looks more like http_port ip-proxy:3128 transparent and due to bug #1650 you will also need the following until a patch is available if you don't have any parent proxies the request should be forwarded to: always_direct allow all patch will be available shortly. Regards Henrik
Attachment:
signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signerad meddelandedel
