| View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] |
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0001362 | ClearOS | app-web-proxy - Web Proxy | public | 2013-10-05 10:36 | 2014-06-25 12:25 |
|
| Reporter | dloper | |
| Assigned To | user2 | |
| Priority | normal | Severity | feature | Reproducibility | always |
| Status | closed | Resolution | fixed | |
| Platform | | OS | | OS Version | |
| Product Version | 6.4.0 | |
| Target Version | 6.6.0 Beta 2 | Fixed in Version | 6.6.0 Beta 2 | |
|
| Summary | 0001362: User authentication makes some services which are incapable of authentication fail. Requires whitelist. |
| Description | When user authentication is enabled, some sites will fail due to the fact that they are incapable of using the underlying authentication. For this reason, there should be a whitelist function of the proxy server.
Even when whitelisted in the default policy of the content filter, these sites will fail because they don't have intrinsic rights to use the proxy.
Again, this is only needed when authentication is present because the regular content filter controls are sufficient. |
| Steps To Reproduce | Set up a server with user authentication. Content filter is optional.
Use dropbox.
You will see requests fail with a TCP_DENIED. Even though it may be on the siteexceptionlist.
|
| Additional Information | By adding a new 'whitelist' category, you can modify which sites do NOT require authentication. This would be added to squid.conf.
acl whitelist dstdomain .freshdesk.com .dropbox.com
# Whitelist: Do not require authentication
http_access allow whitelist
http_access allow CONNECT SSL_ports whitelist |
| Tags | No tags attached. |
|
| Attached Files | |
|
Relationships 
Relationships