Hi,

I have this problem with squid..... plz help me in this

I am trying to do proxy behind proxy.

user --> local proxy (problem) --> parent cache proxy --> internet.

The proxy I am tring to setup locally is forwarding requests to parent cache, to which direct access from client is not allowed. This parent cache is doing ldap authentication with AD.

When I setup local proxy, it was working properly but suddenly stopped working.
Now I am getting error
----------------------------
Cache Access Denied.

Sorry, you are not currently allowed to request:

http://www.google.com/
from this cache until you have authenticated yourself.
----------------------------

My current squid conf file -

http_port 8080
acl all src 0.0.0.0/0.0.0.0
http_access allow all
cache_peer 10.20.12.30 parent 8080 0 no-query proxy-only login=PASS
cache_peer_access 10.20.12.30 allow all
login=PASS
never_direct allow all

---------------------------------------------

I am passing user domain credintials to parents proxy, still it is saying access denied.
what is the problem here, any thing missing in config? do I need to authenticate my local proxy with parent instead of authenticating client? and how do I do that?

Thanks in advance.

Sorry, but squid will not pass the NTLM credentials to the upstream by default.

There is an NTLM module for squid but I'm not sure if it will pass the credentials. It is probably just for plain authentication. You may check the website for more info:
devel.squid-cache.org/ntlm/squid_helper_protocol.html

My suggestion is to have first(downstream) proxy perform the authentication.

HTH