Hello,
I'm running squid 2.6.13 on FreeBSD 6.2. I've set up basic
authentication but when i enter a username/password when squid prompts me i
am again asked. I am certain the username/password i'm providing are
correct. As for the password file itself it's permissions 640 owned by squid
and in the group of squid. In the access.log i'm seeing an error 407 with
the supplied username i gave but in the password field, i believe that's the
next one, i see none. My squid acls are below, i'd appreciate any
suggestions.
Thanks.
Dave.
# squid.conf
# Configure traditional (basic) proxy authentication
auth_param basic program /usr/local/libexec/squid/ncsa_auth
/usr/local/etc/squid/passwd.basic
# authenticator processes to spawn
auth_param basic children 5
# Realm to be reported to the client
auth_param basic realm Squid proxy-caching web server
# Credentials time to live
auth_param basic credentialsttl 2 hours
# Usernames are case insensitive
auth_param basic casesensitive off
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl purge method PURGE
acl CONNECT method CONNECT
# Only allow cachemgr access from localhost
http_access allow purge manager localhost
http_access deny manager purge
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
#
# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
http_access deny to_localhost
#
# Example rule allowing access from your local networks. Adapt
# to list your (internal) IP networks from where browsing should
# be allowed
acl our_networks src 192.168.0.0/24
acl special dstdomain "/usr/local/etc/squid/special"
acl kids dstdomain "/usr/local/etc/squid/kids"
acl chat dstdomain "/usr/local/etc/squid/chat.txt"
acl porn dst "/usr/local/etc/squid/porn.ips"
acl porn1 dstdomain "/usr/local/etc/squid/porn.domains"
acl porn2 url_regex "/usr/local/etc/squid/porn.regex"
acl spyware dstdomain "/usr/local/etc/squid/spyware.acl"
acl malware_block_list url_regex -i
"/usr/local/etc/squid/malware_block_list.txt"
acl auth_users proxy_auth REQUIRED max_user_ip 2
acl FTP proto FTP
http_access allow our_networks auth_users
http_access deny malware_block_list chat spyware porn porn1 porn2
# And finally deny all other access to this proxy
http_access deny all
http_reply_access allow all
always_direct allow special
always_direct allow FTP
1184820627.983 22 192.168.0.2 TCP_DENIED/407 1720 GET
http://www.google.com/ user NONE/- text/html
-rw-r----- 1 squid squid 122 Jul 11 01:30 passwd.basic
-rw-r----- 1 squid squid 164 Jul 11 01:33 passwd.digest
Received on Wed Jul 18 2007 - 23:01:25 MDT
This archive was generated by hypermail pre-2.1.9 : Wed Aug 01 2007 - 12:00:03 MDT