logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Connecting to an Upstream proxy
Author
rusddso



Joined: 02 Jul 2015
Posts: 2
Location: US, San Jose

PostPosted: Thu 02 Jul '15 23:21    Post subject: Connecting to an Upstream proxy Reply with quote

I am using CentOS Linux 6.x and I need to configure a proxy on my local machine to use an upstream proxy (installed on another machine). The upstream proxy requires Digest/NTLM authorization. I want the local proxy to deal with the upstream proxy's authorization details and provides authorization free access to users that connect to it through my local proxy.

Users (1 ..n) -> LocalProxy(no auth) -> UpstreamProxy(Digest/NTLM auth) -> Customer n/w

This is easy to do when the upstream proxy uses Basic Auth but I don't see how to do it for Digest/NTLM Auth. I need a command line solution for my local proxy and I was curious if Apache can do the job.

I don't need to configure the upstream proxy (that's already provided). I need to be the local (intercepting type ) proxy that adds auth credentials to an incoming http request and pass it upstream.

Any ideas ? If yes, what module in Apache should I be looking into ?

Thanks,
Russel
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7373
Location: Germany, Next to Hamburg

PostPosted: Wed 08 Jul '15 23:02    Post subject: Reply with quote

Since the Users do not need to authenticate on the first server ( proxy) I wonder why there has to be authentication on the next proxy.
Back to top
rusddso



Joined: 02 Jul 2015
Posts: 2
Location: US, San Jose

PostPosted: Thu 09 Jul '15 19:26    Post subject: Reply with quote

The reason is we are trying to get multiple users send their traffic out through a single proxy, so that we have better control on what's going out and also if we have to route traffic to different upstream proxies, it is much easier than having every user change their settings.

The upstream proxy auth requirement is not what we want or need but when connecting to other networks they have a requirement that authentication be enforced. From our perspective its easier to have this done on one machine than having to distribute credentials of the upstream proxy to multiple users. Hence the requirement.
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7373
Location: Germany, Next to Hamburg

PostPosted: Wed 15 Jul '15 14:15    Post subject: Reply with quote

Wouldn't it be easier to allow certain IP adresses at the upstream proxy so you don't need the auth over NTLM ?
Back to top


Reply to topic   Topic: Connecting to an Upstream proxy View previous topic :: View next topic
Post new topic   Forum Index -> Apache