Shibboleth and Squid Proxy

[Victoriano Giralt]

On 07/01/2013 03:50 PM, david.tello wrote:
> Shibboleth and Squid Proxy
> Hi all, 
> 
> I'm searching a way to integrate shibboleth with proxy Squid. I want to
> validate users in Squid proxy with SAML, and i want to use Shibboleth. 
> 
> Anyone know if it's posibble? or anyone did it?

I've buried a significant amount of time on that quest, the "normal" web
proxy behaviour, that is. My present conclusion: it is not possible as
things are ATM. I'm looking for alternative ways. The HTTP proxy
protocol does not mix well with SAML redirections. There seem to be
other options, but I've not yet had the time to investigate them. Maybe
others in this list can provide you with different opinions.

> 
> I only want to know if it's posible and some little explication about the
> solutions, and later i will research... 

There are several problems. If you want, I'll be happy to discuss off-list.


-- 
Victoriano Giralt                             Central ICT Services
Systems Manager                               University of Malaga
+34952131415                                  SPAIN
==================================================================
Note: signature.asc is the electronic signature of present message
A: Yes.
> Q: Are you sure ?
>> A: Because it reverses the logical flow of conversation.
>>> Q: Why is top posting annoying in email ?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 255 bytes
Desc: OpenPGP digital signature
Url : http://shibboleth.net/pipermail/users/attachments/20130701/28858a8a/attachment.bin