Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
Topic: Connecting to an Upstream proxy |
|
Author |
|
rusddso
Joined: 02 Jul 2015 Posts: 2 Location: US, San Jose
|
Posted: Thu 02 Jul '15 23:21 Post subject: Connecting to an Upstream proxy |
|
|
I am using CentOS Linux 6.x and I need to configure a proxy on my local machine to use an upstream proxy (installed on another machine). The upstream proxy requires Digest/NTLM authorization. I want the local proxy to deal with the upstream proxy's authorization details and provides authorization free access to users that connect to it through my local proxy.
Users (1 ..n) -> LocalProxy(no auth) -> UpstreamProxy(Digest/NTLM auth) -> Customer n/w
This is easy to do when the upstream proxy uses Basic Auth but I don't see how to do it for Digest/NTLM Auth. I need a command line solution for my local proxy and I was curious if Apache can do the job.
I don't need to configure the upstream proxy (that's already provided). I need to be the local (intercepting type ) proxy that adds auth credentials to an incoming http request and pass it upstream.
Any ideas ? If yes, what module in Apache should I be looking into ?
Thanks,
Russel |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7373 Location: Germany, Next to Hamburg
|
Posted: Wed 08 Jul '15 23:02 Post subject: |
|
|
Since the Users do not need to authenticate on the first server ( proxy) I wonder why there has to be authentication on the next proxy. |
|
Back to top |
|
rusddso
Joined: 02 Jul 2015 Posts: 2 Location: US, San Jose
|
Posted: Thu 09 Jul '15 19:26 Post subject: |
|
|
The reason is we are trying to get multiple users send their traffic out through a single proxy, so that we have better control on what's going out and also if we have to route traffic to different upstream proxies, it is much easier than having every user change their settings.
The upstream proxy auth requirement is not what we want or need but when connecting to other networks they have a requirement that authentication be enforced. From our perspective its easier to have this done on one machine than having to distribute credentials of the upstream proxy to multiple users. Hence the requirement. |
|
Back to top |
|
James Blond Moderator
Joined: 19 Jan 2006 Posts: 7373 Location: Germany, Next to Hamburg
|
Posted: Wed 15 Jul '15 14:15 Post subject: |
|
|
Wouldn't it be easier to allow certain IP adresses at the upstream proxy so you don't need the auth over NTLM ? |
|
Back to top |
|
|
|
|
|
|