Authenticating to a Non-BorderManager Parent Proxy Server Using HTTP

Novell Cool Solutions: Feature

Digg This - Slashdot This Posted: 17 May 2002

Version: BorderManager 3.7

The proxy module can be configured to send a proxy- authorization header when forwarding a request to a CERN parent by adding the following section to the ETC/PROXY/PROXY.CFG file:

[Proxy-Authorization]
UserName=<user_defined_on_cern_parent>
Password=<password>
ProxyReAuthorization=1

The username and password must use basic authentication (NTLM is not supported). Because basic authentication credentials cannot be extracted from an encrypted packet, users connecting to an SSL site are prompted for a valid user name and password on the CERN parent. If all users must authenticate individually to the CERN parent, leave the User Name and Password fields blank.

To disable this feature, add only the following to the ETC/PROXY/PROXY.CFG file:

[Proxy-Authorization]
AlwaysSendAuthorizationToCERNParent=0

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com