Debian 10 Buster
Sponsored Link

Squid : Basic Authentication2019/07/31

 
Set Basic Authentication and limit Squid for users to require authentication.
[1] Install a package which includes htpasswd.
root@prox:~#
apt -y install apache2-utils
[2] Configure Squid to set Basic Auth.
root@prox:~#
vi /etc/squid/squid.conf
acl CONNECT method CONNECT
# line 1209: add follows for Basic auth

auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/.htpasswd
auth_param basic children 5
auth_param basic realm Squid Basic Authentication
auth_param basic credentialsttl 5 hours
acl password proxy_auth REQUIRED
http_access allow password
# add a user : create a new file with "-c" ("c" is only for the initial registration)

root@prox:~#
htpasswd -c /etc/squid/.htpasswd debian

New password:    
# set password

Re-type new password:
Adding password for user debian
root@prox:~#
systemctl restart squid
Proxy Clients Setting : Debian
[3] Configure Debian Proxy Client for Basic Auth.
root@client:~#
vi /etc/profile.d/proxy.sh
# create new (set cs to the environment variables)

# (username:password)@(proxy server)

MY_PROXY_URL="debian:password@prox.srv.world:3128"

HTTP_PROXY=$MY_PROXY_URL
HTTPS_PROXY=$MY_PROXY_URL
FTP_PROXY=$MY_PROXY_URL
http_proxy=$MY_PROXY_URL
https_proxy=$MY_PROXY_URL
ftp_proxy=$MY_PROXY_URL

export HTTP_PROXY HTTPS_PROXY FTP_PROXY http_proxy https_proxy ftp_proxy

root@client:~#
source /etc/profile.d/proxy.sh
# apt proxy setting

root@client:~#
vi /etc/apt/apt.conf
# create new

Acquire::http::proxy "http://debian:password@prox.srv.world:3128/";
Acquire::https::proxy "https://debian:password@prox.srv.world:3128/";
Acquire::ftp::proxy "ftp://debian:password@prox.srv.world:3128/";
# wget proxy setting

root@client:~#
vi /etc/wgetrc
# add to the end

http_proxy = prox.srv.world:3128
https_proxy = prox.srv.world:3128
ftp_proxy = prox.srv.world:3128
proxy_user = debian
proxy_passwd = password
Proxy Clients Setting : Windows
[4] For Windows Clients, none of specific settings, but when access to a web, proxy server requires authentication like follows, then input username and password.
Matched Content