squid 4/5 feature request send login informations to peers

David Touzeau <david@xxxxxxxxxxxxxx> · Tue, 17 Nov 2020 09:27:09 +0100



    Hi,

      
      We a first Squid using Kerberos + Active Directory authentication.

      This first squid is used to limit access using ACls and Active
      Directory groups.

      
      This first squid using parents as peer in order to access to
      internet in this way:

      
                                   | --------> SQUID B ---------->
      Internet 1

      squid A ------------->

                                   | ---------> SQUID C --------->
      Internet 2

      
      1) We want using
        ACLs too ( for delegation purpose ) on Squid B and C 

      2) For legal logs purpose compliance. 

      
      In this case,  the username discovered in SQUIDA must be
      transmitted to SQUID B AND C and SQUID B-C must accept the
      information in order to use as login information to parse acls

      
      Is it possible ?

      
      If not: wee have seen that the Proxy protocol accept to transmit
      the source IP/login information to peers that are compliance with
      proxy protocol.

      but the peers method in squid did not allow to use Proxy protocol.

      Is it possible to add the "Proxy Protocol" support in peers method
      ?

      
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users