Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I managed to configure Squid v.3.1.19 to authenticate against a Samba v. 3.6.3 domain, that uses tdbsam as backend. I used the smb_auth utility provided with Squid package, and everything works as expected, except the credentialsttl directive. That option tells Squid the retain period of the credentials after an user has successfully authenticated: I have set it to 8 hours, but every time I close and re-open the browser, the authentication popup appears. I have also tried with a similar parameter, authenticate_ttl, but the result is the same. Do I have to enable any other option? Or the auth_param basic program does not support credential caching? Here is my squid.conf:

#AUTH
auth_param basic program /usr/lib/squid3/smb_auth -W DOMAIN -U 172.25.5.10 -S authorized$
auth_param basic children 5
auth_param basic realm Proxy
auth_param basic credentialsttl 8 hours
#authenticate_ttl 8 hours

acl manager proto cache_object
acl localhost src 127.0.0.1/32 ::1
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
acl SSL_ports port 443 7071
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl server src 172.25.5.2 172.25.5.7
acl auth proxy_auth REQUIRED
acl CONNECT method CONNECT

http_access allow server
http_access deny manager
http_access allow manager localhost
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access allow auth
http_access deny all

http_port 3128
share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.