Thanks. I'll go the intercept route so I'll pass on the WCCP setup for now. What auth method would you folks suggest. Easiest to setup? Once i get this going with WPAD and PAC, I'll look at a second box for squid as don't want users to not connect to the Internet if the Squid box dies. ---- On Wed, 20 Jul 2011 19:35:41 -0600 Alfonso Alejandro Reyes Jimenez wrote ---- >Chinner. > >This information is not part of the squid configuration but I couldn't let you jump to Cisco wccp without sharing my experience. > >That feature is not working right with any asa5500 IOS version, it has a lot of bugs. Be very careful if you set it up on production environment. > >Regards. > >Alfonso. > >-----Mensaje original----- >De: chinner999 [mailto:chinner999@xxxxxxxxx] >Enviado el: miércoles, 20 de julio de 2011 11:39 a.m. >Para: squid-users@xxxxxxxxxxxxxxx >Asunto: Re: Getting SARG to show usernames instead of IP > >Right from the squid.conf file > > WARNING: authentication can't be used in a transparently intercepting ># proxy as the client then thinks it is talking to an origin server and ># not the proxy. This is a limitation of bending the TCP/IP protocol to ># transparently intercepting port 80, not a limitation in Squid. ># Ports flagged 'transparent', 'intercept', or 'tproxy' have ># authentication disabled. > >Guess I can't use authentication with a transparent setup. Will have to investigate intercept proxy. I'm trying to use Cisco WCCP via our Cisco 5505's so if I go intercept proxy and the Squid server goes offline, Internet traffic can still go through. > > >---- On Wed, 20 Jul 2011 10:21:47 -0600 Chad Naugle wrote ---- > >>Simple answer: SARG (or any log analyzer) requires Squid to post >>usernames in the access log, by using authentication helpers. I am not >>certain if this can be done in Transparent or Intercept mode at all. >> >>>>> chinner999 7/20/2011 12:11 PM >>> >>Hi guys, >>I have SARG running and the reports shows usage per user by ip address. >> How do I get it to show username instead? The users are using Active >>Directory. >> >>I don't have Squid configured for any authentication currently. >> >>Ubuntu v10.04 >>Sarg v2.2.7.1 >>Squid v3.1.6 - transparent >> >>Thanks. >> >> >> >>Travel Impressions made the following annotations >>------------------------------------------------------------- >>"This message and any attachments are solely for the intended recipient >>and may contain confidential or privileged information. If you are not >>the intended recipient, any disclosure, copying, use, or distribution of >>the information included in this message and any attachments is >>prohibited. If you have received this communication in error, please >>notify us by reply e-mail and immediately and permanently delete this >>message and any attachments. >>Thank you." >> >
