SLUG Mailing List Archives
Re: [SLUG] Q: Using SQUID to authenticate internet users ?
- To: "Matt Hyne" <mhyne@xxxxxxxxx>
- Subject: Re: [SLUG] Q: Using SQUID to authenticate internet users ?
- From: "Luke McKee" <luke.mckee@xxxxxxxxxx>
- Date: Wed Sep 6 14:19:29 2000
- Cc: <slug@xxxxxxxxxxx>
According to the squid docs you can not do authentication when you are doing
In transparent proxying - the proxy pretends to be the webserver the user is
trying to access.
The web browser going through the transparent proxy can't tell that the
password came from the proxy server - because the proxy server is
masquerading as the website the user was trying to visit instead.
I am afraid you have to configure a proxy in your users web browsers
settings if you want to have proxy authentication.
The squid documentation put this more articulately than I ever could.
You could also try creating auto configuration scripts for Netscape and
Microsoft's browsers that will set up the proxy server settings for them.
This will make it easier for the users - and can also stop their set up from
being messed up if they use a different service.
From: Matt Hyne <mhyne@xxxxxxxxx>
To: slug@xxxxxxxxxxx <slug@xxxxxxxxxxx>
Date: Wednesday, September 2000 3:00 PM
Subject: [SLUG] Q: Using SQUID to authenticate internet users ?
>My father has a small business network with about 12-15 users and a
dial-on-demand internet connection running from a Linux box to his local
>What he would like to try and do is require PC users wanting to use the web
to have to authenticate before they can access any external webpages. This
is because he only wants a select number of staff to have web access as it
is expensive and uses bandwidth.
>Now, the first thing someone is going to say is "why don't you block the ip
addresses of the un-authorised users' PCs" - well the staff do a lot of
hot-desk work where they will not be using the same PC every day. Also, in
other areas, 5 or 6 people use the same PC.
>My question is - can this be done with squid (and transparently) and does
anyone have an example config that I can take a look at and try to build my
>I've seen commercial products that do this - but I would prefer a Linux
>SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
>More Info: http://slug.org.au/lists/listinfo/slug