5.9 Как мне указать Squid использовать определенное имя пользователя для ftp?

Вставьте ваше имя пользователя в URL, к примеру:

ftp://joecool@ftp.foo.org/

Squid должен запросить у вас пароль для вашей учетной записи. Вы также можете указать и имя и пароль в URL:

ftp://joecool:secret@ftp.foo.org/

Однако, мы категорически не рекомендуем поступать подобным образом, т.к. любой может запросто подсмотреть ваш пароль.

5.10 Настройка броузеров для wpad

by Mark Reynolds

You may like to start by reading the Internet-Draft that describes WPAD.

After reading the 8 steps below, if you don't understand any of the terms or methods mentioned, you probably shouldn't be doing this. Implementing wpad requires you to fully understand:

1. web server installations and modifications.

2. squid proxy server (or others) installation etc.

3. Domain Name System maintenance etc.

Пожалуйста, не забрасывайте списко рассылки squid вопросами по настройке web-серверов или dns. See your system administrator, or do some more research on those topics.

This is not a recommendation for any product or version. As far as I know IE5 is the only browser out now implementing wpad. I think wpad is an excellent feature that will return several hours of life per month. Hopefully, all browser clients will implement it as well. But it will take years for all the older browsers to fade away though.

I have only focused on the domain name method, to the exclusion of the DHCP method. I think the dns method might be easier for most people. I don't currently, and may never, fully understand wpad and IE5, but this method worked for me. It may work for you.

But if you'd rather just have a go ...

1. Create a standard netscape auto proxy config file. The sample provided there is more than adequate to get you going. No doubt all the other load balancing and backup scripts will be fine also.

2. Store the resultant file in the document root directory of a handy web server as wpad.dat (Not proxy.pac as you may have previously done.)

Andrei Ivanov notes that you should be able to use an HTTP redirect if you want to store the wpad.dat file somewhere else. You can probably even redirect wpad.dat to proxy.pac:

Redirect /wpad.dat http://racoon.riga.lv/proxy.pac

3. If you do nothing more, a url like http://www.your.domain.name/wpad.dat should bring up the script text in your browser window.

4. Insert the following entry into your web server mime.types file. Maybe in addition to your pac file type, if you've done this before.

5. application/x-ns-proxy-autoconfig dat

And then restart your web server, for new mime type to work.

6. Assuming Internet Explorer 5, under Tools, Internet Options, Connections, Settings or Lan Settings, set ONLY Use Automatic Configuration Script to be the URL for where your new wpad.dat file can be found. i.e. http://www.your.domain.name/wpad.dat Test that that all works as per your script and network. There's no point continuing until this works ...

7. Create/install/implement a DNS record so that wpad.your.domain.name resolves to the host above where you have a functioning auto config script running. You should now be able to usehttp://wpad.your.domain.name/wpad.dat as the Auto Config Script location in step 5 above.

8. And finally, go back to the setup screen detailed in 5 above, and choose nothing but the Automatically Detect Settings option, turning everything else off. Best to restart IE5, as you normally do with any Microsoft product... And it should all work. Did for me anyway.

9. One final question might be 'Which domain name does the client (IE5) use for the wpad... lookup?' It uses the hostname from the control panel setting. It starts the search by adding the hostname "WPAD" to current fully-qualified domain name. For instance, a client in a.b.Microsoft.com would search for a WPAD server at wpad.a.b.microsoft.com. If it could not locate one, it would remove the bottom-most domain and try again; for instance, it would try wpad.b.microsoft.com next. IE 5 would stop searching when it found a WPAD server or reached the third-level domain, wpad.microsoft.com.

Anybody using these steps to install and test, please feel free to make notes, corrections or additions for improvements, and post back to the squid list...

There are probably many more tricks and tips which hopefully will be detailed here in the future. Things like wpad.dat files being served from the proxy server themselves, maybe with a round robin dns setup for the WPAD host.