hello!


i am using dansguardian with squid-cache proxy. i want to use authentication.

i dont know what are the available options. one of the available options are "smb_auth" but how to use it?

is there any other available authentication methods?

some authentication methods are not secure at all! for example my college had a proxy with authentication and all passwords were sent without encryption or weak encryption!


so the first question is : what is the most secure proxy authentication method available ?


the second question is: how to do it or is there any good tutorial ?. i am searching for about one week and i didnt get any good result. i am counting on you guys!




waiting to hear from you

Try this Googled link..
http://www.harkness.co.uk/proxy/web_caching.html (the end of the page)
and a comment from the Author about using proxy_auth..
http://groups.yahoo.com/group/dansgu.../message/10297

This looks like it uses squid to auth against a samba server as IE clients hold their login info ready...

thanks peter_robb


as i read, most proxy auth methods are sent in plain text, or just encoded to binaries which can be easly decoded. absolutely not secure.

what about smb_auth? how secure is it?

umm NTLM, it does not ask the user about for proxy auth coz IE will store user name and password in its memory some where. means one login is enough. but i dont want this because of two reasons:-

1- DansGuardian does not support NTLM as shown in its configuration page.
2- i want the user to be asked each time, because it can be that the user leaves his comptuer open after his logon. so it is better to be asked each time.

but what about security? NTML or smb_auth?
security is at the first place, if NTML is more secure than smb_auth, i'll use it. so please focus on this guys.



keep info comming

Use the proxy_auth function in Dansguardian,
and setup squid to do NTLM.. then it's encrypted..

http://www.flatmtn.com/computer/Linux-SquidNT.html
http://squid.sourceforge.net/ntlm/