----- Mensagem Original----- De: Clemente Aguiar <clemente.aguiar@xxxxxxxxxxxxxxxxxxx> Para: Amos Jeffries <squid3@xxxxxxxxxxxxx> Cc: squid-users@xxxxxxxxxxxxxxx Assunto: Re: config of squid to use external proxy Data: Thu, 28 Jan 2010 15:15:43 +0000 Sex, 2010-01-29 às 03:32 +1300, Amos Jeffries escreveu: > Clemente Aguiar wrote: > > I want to config my transparent squid to use an external proxy (with > > user/password) authentication when accessing a specific set of sites. > > > > At present the situation is as follows: > > When I want to access a specific site, say www.example.com, I am > > required to set my browser proxy settings to use an external proxy, for > > instance proxy.external.com port 8080, and then I am required to enter a > > user and password. Basically the site www.example.com is only accessible > > through this proxy which is external to our site. > > > > On our site we have our own squid box configured as transparent cache > > (using WCCPv2), so what I would like is to be able to access > > www.example.com (transparently), i.e. without having to change my > > browser proxy settings. > > > > Can anybody help me with the squid config? > > > > Two possible solutions: > > 1) requires a single login using Basic auth to the parent. shared by all > users of the child proxy. > cache_peer .... login=Username:Password > > 2) permits for a variation of usernames, but Password is not > retrievable. Requires a helper that returns "OK user=Foo" when handed an > IP address and th parent proxy to accept the same password fro all users > (anonymous login with username tracking ) > > external_acl_type ... > cache_peer ... login=PASS > or > external_acl_type ... > cache_peer ... login=*:FixedPassword > > > Amos Thanks. I tried this and it seems to work. Is this correct? cache_peer proxy.external.com parent 8080 0 no-query login=user:pass acl example_acl dstdomain .example.com cache_peer_access proxy.external.com allow example_acl never_direct allow example_acl
