From 69645670dbac91bbc6eff5846124fb68f6458c9f Mon Sep 17 00:00:00 2001 From: Marcello Coutinho Date: Fri, 13 Apr 2012 20:11:05 -0300 Subject: squid3 - merge squid3 and squid-reverse in one package --- config/squid-reverse/squid_auth.xml | 136 ++++++++++++++++++++---------------- 1 file changed, 76 insertions(+), 60 deletions(-) (limited to 'config/squid-reverse/squid_auth.xml') diff --git a/config/squid-reverse/squid_auth.xml b/config/squid-reverse/squid_auth.xml index 8d6e046e..e04dbfba 100644 --- a/config/squid-reverse/squid_auth.xml +++ b/config/squid-reverse/squid_auth.xml @@ -55,15 +55,15 @@ /pkg_edit.php?xml=squid.xml&id=0 - Upstream Proxy + Upstream /pkg_edit.php?xml=squid_upstream.xml&id=0 - Cache Mgmt + Cache /pkg_edit.php?xml=squid_cache.xml&id=0 - Access Control + ACLs /pkg_edit.php?xml=squid_nac.xml&id=0 @@ -71,20 +71,24 @@ /pkg_edit.php?xml=squid_traffic.xml&id=0 - Reverse Settings - /pkg_edit.php?xml=squid_reverse.xml&id=0 - - - Auth Settings + Authentication /pkg_edit.php?xml=squid_auth.xml&id=0 - Local Users + Users /pkg.php?xml=squid_users.xml + + Sync + /pkg_edit.php?xml=squid_sync.xml + + + Squid Authentication General Settings + listtopic + Authentication method auth_method @@ -101,17 +105,6 @@ on_auth_method_changed() - - LDAP version - ldap_version - Enter LDAP protocol version (2 or 3). - select - 2 - - - - - Authentication server auth_server @@ -127,11 +120,57 @@ 60 - NT domain - auth_ntdomain - Enter here the NT domain. + Authentication prompt + auth_prompt + This string will be displayed at the top of the authentication request window. + input + Please enter your credentials to access the proxy + + + Authentication processes + auth_processes + The number of authenticator processes to spawn. If many authentications are expected within a short timeframe, increase this number accordingly. input 60 + 5 + + + Authentication TTL + auth_ttl + This specifies for how long (in minutes) the proxy server assumes an externally validated username and password combination is valid (Time To Live). When the TTL expires, the user will be prompted for credentials again. + input + 60 + 60 + + + Requiere authentication for unrestricted hosts + unrestricted_auth + If this option is enabled, even users tagged as unrestricted through access control are required to authenticate to use the proxy. + checkbox + + + Subnets that don't need authentication + no_auth_hosts + Enter each subnet or IP address on a new line (in CIDR format, e.g.: 10.5.0.0/16, 192.168.1.50/32) that should not be asked for authentication to access the proxy. + textarea + 50 + 5 + base64 + + + Squid Authentication Ldap Settings + listtopic + + + LDAP version + ldap_version + Enter LDAP protocol version (2 or 3). + select + 2 + + + + LDAP server user DN @@ -171,10 +210,14 @@ (&(objectClass=person)(uid=%s)) - RADIUS secret - radius_secret - The RADIUS secret for RADIUS authentication. - password + Squid Authentication NT Domain Settings + listtopic + + + NT domain + auth_ntdomain + Enter here the NT domain. + input 60 @@ -185,42 +228,15 @@ 60 - Authentication prompt - auth_prompt - This string will be displayed at the top of the authentication request window. - input - Please enter your credentials to access the proxy - - - Authentication processes - auth_processes - The number of authenticator processes to spawn. If many authentications are expected within a short timeframe, increase this number accordingly. - input - 60 - 5 + Squid Authentication Radius Settings + listtopic - Authentication TTL - auth_ttl - This specifies for how long (in minutes) the proxy server assumes an externally validated username and password combination is valid (Time To Live). When the TTL expires, the user will be prompted for credentials again. - input + RADIUS secret + radius_secret + The RADIUS secret for RADIUS authentication. + password 60 - 60 - - - Requiere authentication for unrestricted hosts - unrestricted_auth - If this option is enabled, even users tagged as unrestricted through access control are required to authenticate to use the proxy. - checkbox - - - Subnets that don't need authentication - no_auth_hosts - Enter each subnet or IP address on a new line (in CIDR format, e.g.: 10.5.0.0/16, 192.168.1.50/32) that should not be asked for authentication to access the proxy. - textarea - 50 - 5 - base64 -- cgit v1.2.3