[squid-users] Forward proxy with BASIC authentication

[fzab_]

Hi,
I want to use Squid locally on my computer to forward all traffic to a
parent Squid proxy which uses BASIC authentication. The aim is to not store
my password on every configuration file that needs internet access.

So here's the only lines I added to Squid default conf file :

/cache_peer x.x.x.x parent 3128 0 no-query default login=login:password
no-digest
never_direct allow all/

It seems to work for a few minutes, but it doesn't seem to authenticate
again when needed to. The access log shows 407 errors when it breaks. :

/297 127.0.0.1 TCP_MISS/407 2071 GET http://...../

Am I missing something, when I take a look at the sent requests, none have
an authentication header?



--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Forward-proxy-with-BASIC-authentication-tp4668592.html
Sent from the Squid - Users mailing list archive at Nabble.com.

[Amos Jeffries]

Hi, I want to use Squid locally on my computer to forward all
traffic to a parent Squid proxy which uses BASIC authentication.
The aim is to not store my password on every configuration file
that needs internet access.
/cache_peer x.x.x.x parent 3128 0 no-query default
login=login:password no-digest never_direct allow all/
It seems to work for a few minutes, but it doesn't seem to
authenticate again when needed to. The access log shows 407 errors
/297 127.0.0.1 TCP_MISS/407 2071 GET http://...../
Am I missing something, when I take a look at the sent requests,
none have an authentication header?

All requests from Squid to its cache_peer should have the header:
Proxy-Authorization: Basic bG9naW46cGFzc3dvcmQg

(bG9naW46cGFzc3dvcmQg being base64 encoded string "login:password").

If you are getting a 407 *from the peer*, that means either it does
not want Basic auth or the login:password details are incorrect. Squid
supports only Kerberos or Basic auth to peers, not Digest or NTLM.

Amos