Dear Amos, Thanks for yours always clear & bountiful answer. This really help the freshers of Squid like me. Best Regards Tony Fei -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: 2010年8月16日 19:54 To: squid-users@xxxxxxxxxxxxxxx Subject: Re: Transparent proxy on LDAP_GROUP tony.fei@xxxxxxxx wrote: > > Dear experts, > > I configed Squid with LDAP_Group authentication, each user in ProxyUsers group of AD can surf after inputting user name/password when he open browser. > I'd like to know is there a way needn't user input id/passoword if he already in ProxyUsers group, to say make Squid total transparent to users. Thanks for sharing ! The popup is part of the web browsers security system. Squid has nothing to do with that. Modern browsers can be configured with a login cache for website and proxy logins. Once the master password is given the others are handed out as needed to the right places. Use of secure auth protocols (Digest, NTLM, Kerberos) can also help the browser send pre-encrypted tokens without needing a popup. Squid can participate there by being configured to use them. Basic auth protocol has the password in visible text form, so handing it out without user consent is a bad idea and browser wont do it. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.6 Beta testers wanted for 3.2.0.1 IMPORTANT NOTICE Email from OOCL is confidential and may be legally privileged. If it is not intended for you, please delete it immediately unread. The internet cannot guarantee that this communication is free of viruses, interception or interference and anyone who communicates with us by email is taken to accept the risks in doing so. Without limitation, OOCL and its affiliates accept no liability whatsoever and howsoever arising in connection with the use of this email. Under no circumstances shall this email constitute a binding agreement to carry or for provision of carriage services by OOCL, which is subject to the availability of carrier's equipment and vessels and the terms and conditions of OOCL's standard bill of lading which is also available at http://www.oocl.com.
