0001362: User authentication makes some services which are incapable of authentication fail. Requires whitelist.

ClearFoundation Tracker - ClearOS

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0001362

ClearOS

app-web-proxy - Web Proxy

public

2013-10-05 10:36

2014-06-25 12:25

Reporter

dloper

Assigned To

user2

Priority

normal

Severity

feature

Reproducibility

always

Status

closed

Resolution

fixed

Platform

OS Version

Product Version

6.4.0

Target Version

6.6.0 Beta 2

Fixed in Version

6.6.0 Beta 2

Summary

0001362: User authentication makes some services which are incapable of authentication fail. Requires whitelist.

Description

When user authentication is enabled, some sites will fail due to the fact that they are incapable of using the underlying authentication. For this reason, there should be a whitelist function of the proxy server.

Even when whitelisted in the default policy of the content filter, these sites will fail because they don't have intrinsic rights to use the proxy.

Again, this is only needed when authentication is present because the regular content filter controls are sufficient.

Steps To Reproduce

Set up a server with user authentication. Content filter is optional.

Use dropbox.

You will see requests fail with a TCP_DENIED. Even though it may be on the siteexceptionlist.

Additional Information

By adding a new 'whitelist' category, you can modify which sites do NOT require authentication. This would be added to squid.conf.

acl whitelist dstdomain .freshdesk.com .dropbox.com

# Whitelist: Do not require authentication
http_access allow whitelist
http_access allow CONNECT SSL_ports whitelist