Hi experts, We are running Squid version 2.7.STABLE8 in acceleration mode. What we want to achieve is that - when the site is accessed through squid reverse proxy web site should prompt for authentication window. The authentication request is sent to Active directory by IIS server before granting further access to the web site. This work perfectly ok with http - we do http://squid-rev.domain.com, we get the authentication window and after correctly entering user name password, we get full access to the site. Now the problem - when we configure ssl certificate and https://squid-rev.domain.com we get authentication window and after that nothing appears on screen. We tried various options but with no success. Pl help. The Squid.conf is as following - acl manager proto cache_object acl localhost src 127.0.0.1/32 acl to_localhost dst 127.0.0.0/8 acl all_dst dst 0.0.0.0/0.0.0.0 acl all src 0.0.0.0/0.0.0.0 acl SSL_ports port 443 acl CONNECT method CONNECT http_access allow manager localhost http_access allow all http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localnet http_access allow owa_host http_access deny all icp_access allow localnet icp_access deny all htcp_access allow localnet htcp_access deny all http_port 80 accel defaultsite=iishost vhost **** FOR HTTPS Access - https_port ip-add:443 cert=/path/selfsigned_cert.pem key=/path/key.pem ssl_unclean_shutdown on cache_peer iishost parent 80 0 no-query originserver login=PASS hierarchy_stoplist cgi-bin ? access_log /usr/local/squid/var/logs/access.log squid refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern (cgi-bin|\?) 0 0% 0 refresh_pattern . 0 20% 4320 cache_effective_user squid cache_effective_group squid visible_hostname squid-Rev icp_port 3130 coredump_dir /usr/local/squid/var/cache Thanks & regards, Rakesh Jha Attention: Any non-official business related views, opinions and other information presented in this electronic mail are solely those of the sender/author. Burgan Bank does not endorse or accept responsibility for their opinions. If you are not the addressed indicated in this mail or responsible for delivering this message to the intended, you should delete this message and notify the sender immediately. ------------------------------------------------------- Burgan Bank S.A.K www.burgan.com
