-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 15/11/2014 5:21 p.m., santosh wrote: > Hello Team, > > I have set-up squid proxy server with ldap authentication , the > infrastructure is setup in such a way that users have to access the > internet through the proxy .In Internet explorer there's an option > to save the credntials and once its saved during the prompt squid > wont ask for credentials the user will have direct access to > internet . Wrong and wrong. HTTP (thus Squid) is stateless. Each and every single request requires the credentials necessary to pass that request through the proxy. Whenever the credentials are missing or invalid Squid WILL ask. The browser and only the browser can decide what credentials (if any) are sent on the request. > I understand this is an browser issue is there a way in squid which > can prevent the caching of credentials Do you have a time machine? The browser actions happen long before Squid ever hears about the credentials for the first time. > or give a timeout so that the user is prompted to reauthenticate > from squid . I have searched on web all i get is help on disabling > the credential cache of windows . Re-authenticate is another matter. The only way to do this is to tell the browser the credentials it is sending are invalid. Timeout is one way to trigger re-authentication. Validity TTL is the business of the background authentication system you are using to check the credentials validity (the auth helper). So why are you trying to force frustration and annoyance on your users? Amos -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUZuR2AAoJELJo5wb/XPRj9fUH/RQBEu/whtwjCWuQHjujyREo HXWjrKKgVM/yXccgYhozJryCuFbErJgQLHit8IoKOFFO1/e6tWSq0xc5dB+KUtag KY1Ugg5AxveVJmGKak/QV4h0+JHL5s8xX4pjEYRk1EY/H7ScIob2/LtphHQMEUWv ikSy7rEGlGF9mgOjF4mIZDPwqhKCssgdu0hA9YNShHjX2o+jqlaQVV/J1A1qI/BR jbmKP+QH0Bf1h/zIDe1CAOhqSAZFiAEJ+MidxevPwQzA6ovgFH+4yJbZNnt+cvVt MHzS/Wbut1o/UWgJ0CrXtrhNkPJRByRBKxo3e5IVaYaDOJZ/ok4Pc6qwKR2skhc= =AYUH -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
