Hi,

Squid is running on Suse 7.2, works perfectly fine except for the following:

Website is access controlled with a windows logon (username, password, domian).

Squid only sends back (to the client) an 'access denied'.

on the squid (with netscape) the login window appears and you can log in.

How can I solve this?

Regards

Mark

Hi ,

let me be honest but i didnt really get what is it that ur trying to say !!!

is it that u dont get access denied with browsers other than netscape ? if so than its definately strange problem and one that i havent seen so far !!!

or is it that ur able to browse from the linux machine but not from other clients ? if so than its because the ACL allows ur own ip but not others ( its default !) ......

what's the exact situation ?

regards,
xanthium.

Okay I am sorry I gave the readers digest version...

Now here is the full story

The Squid is running on Suse 7.2 with IP forwarding switched on.

This proxy has a VPN connection to another part of the companies network which is (unfortunately) only running w2k machines as webservers.

One of the webpages on one of those servers is protected by a login.
This login is provided by the w2k server. It asks in a separate window which is provided by a windows IIS5 server for username, password and domainname. It only accepts logins which have an account on this particular server.

For various reasons I do have to use a proxy to access this part of our company network.

If I use the computer the proxy is running on, then I do have access to this webpage after the login came up and I signed in. If I use a client computer which is 'behind' the proxy I get an access denied and there is no login that comes up.

What I see in the access.log is that the squid just confirms the login and therefor gets an access denied, which is sent to the client.

My questions are :
How can I configure Squid that way, that it provides that login window to the client machine in my network?
How can I configure the ACL that way that this happens?

Regards

Mark

hi ,

for squid to authemticate ur user u need authentication program ..... unfortunately its not supplied with squid ... u can use one that comes with apache i think its called ncsa_auth
or maybe u can use source code and compile one ..... making squid squid use this program is just a metter of configuring the squid.conf file.

okie .

as for ur win2k denial i again say something is wrong with ur ACL

hope this helps.

regards,
xanthium

i assume that you are not asking your clients to authenticate themselves against squid but rathet one of your win2k servers needs authentication before it will serve up any webpages.
squid should'nt have a problem with that setup so my guess is that you may not have altered the default squid.conf file.

in your squid.conf go to the acl section and add the following

acl lan src 192.168.10.0/24

and immediately after that add

http_access allow lan


save the squid.conf file and restart squid.


Now try accessing the webserver from a client.

because you said your localhost is able to get the login dialog i'm sure this will solve your prob.


all the best.