Testing Registration with Authenticated Proxy

Authenticated Proxy Server

If you do not have a proxy server with authentication here is a quick step by step setup:

• Install squid package (zypper install squid apache2-utils)
• Create a password database for proxy (htpasswd2 -c /etc/squid/squid.pass user1, enter the password for user user1). You can use LDAP, PAM, or other backend if needed, see the squid documentation.
• Create a minimal /etc/squid/squid.conf file :

# authentication config
# note: some older versions used "/usr/sbin/basic_ncsa_auth" path, change it if needed
auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/squid.pass
auth_param basic children 5 startup=5 idle=1
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users
http_access deny all
# the rest is from the default config
http_port 3128
coredump_dir /var/cache/squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern .               0       20%     4320

• Restart the proxy server (rcsquid restart)
• Make sure the proxy port 3128 is not blocked by firewall (or disable firewall completely)
• Test connection to the proxy server (either use the proxy in a web browser or simply connect to http://<proxy>:3128).

Setting Proxy in Installation

• Boot the installation DVD
• Press F4 -> HTTP Proxy, enter proxy host name, port (3128), user and password
• Start the installation

Verification

The registration during installation should succeed, you can check /var/log/squid/access.log file on the proxy server to verify that the proxy was really used (you should see scc.suse.com:443 and updates.suse.com:443 access in the log).