Re: Authentication on a proxy

On Thu, 29 Apr 1999, Buchs Christian wrote:

> 
> With the following system:
> 
> one machine "A" is running Jigsaw as a mirror (MirrorFrame)
> to a second machine "B" acting as a proxy (with Jigsaw's ProxyFrame).
> 
> Users (browsers) connect to "A". Is there a way to authenticate them
> on "B"? (I have tried putting a GenericAuthFilter on the ProxyFrame,
> it doesn't work). Is it possible?

GenericAuthFilter on the ProxyFrame works, it will reply
Proxy-Authenticate instead of WWW-Authenticate (It allows you to go to a
protected site while protecting your proxy).
The main problem is that Proxy-Authenticate is a hop-by-hop header and it
will be removed by the first proxy (the mirror)
So you may to only ip authentication for the mirror and do the first
authentication on the mirror instead of the proxy (which will allow only
the mirror to talk)
Hope this helps,

      /\          - Yves Lafon - World Wide Web Consortium - 
  /\ /  \        Architecture Domain - Jigsaw Activity Leader
 /  \    \/\    
/    \   /  \   http://www.w3.org/People/Lafon - ylafon@w3.org