Author Topic: Simple proxy authentication not working (Read 5335 times)

johnbritto · « **on:** April 23, 2006, 03:02:30 PM »

Dear All,

I am attaching my squid.conf file....................im using RHEL AS 4.0 using as a simple squid server........but when i browsing thruough IE its not asking the Authentication....

Pls tell me where the mistake i done...and give the any tips .

#Default:
http_port 3128
http_port 192.168.0.100:3128

#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

acl cchubb src 192.168.0.0/24
#acl BADPC src 192.168.0.102
acl FILE_MP3 urlpath regex -i \.mp3$
acl bad_domains dstdom_regex -i "/etc/squid/bad_domains"
acl mail url_regex mail
acl chat url_regex chat
acl business_hours time M T W H F A S 9:00-17:00
acl ncsa_users proxy_auth REQUIRED

#Recommended minimum configuration:
#auth_param digest program <uncomment and complete this line>
#auth_param digest children 5
#auth_param digest realm Squid proxy-caching web server
#auth_param digest nonce_garbage_interval 5 minutes
#auth_param digest nonce_max_duration 30 minutes
#auth_param digest nonce_max_count 50
#auth_param ntlm program <uncomment and complete this line to activate>
#auth_param ntlm children 5
#auth_param ntlm max_challenge_reuses 0
#auth_param ntlm max_challenge_lifetime 2 minutes
#auth_param ntlm use_ntlm_negotiate off
#auth_param basic program <uncomment and complete this line>
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd

http_access deny chat
http_access deny mail
http_access deny bad_domains
http_access deny FILE_MP3
#http_access deny BADPC
http_access allow cchubb
http_access allow business_hours
http_access allow ncsa_users
# And finally deny all other access to this proxy
http_access allow localhost
http_access deny all

gauravbajaj · « **Reply #1 on:** April 23, 2006, 05:14:56 PM »

The below line is not same for all Linux Versions, I think its different in RED HAT LINUX 8 and RED HAT 9

Just chk this line ..means Is this line is default written like this only in your Linux Version?Just chk it

auth_param basic prram /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd

If above is ok then , Try this

Remove all http_access tags , other then this:

Means just add these tags , remove all others http_access tags

http_access allow ncsa_users
http_access deny all

If still it will not run , then Just tell me wheather u have made this file
/etc/squid/squid_passwd

and Added ncsa users to it?

Regards
Gaurav

johnbritto · « **Reply #2 on:** April 25, 2006, 05:17:24 AM »

Hi Gaurav,

Thanks for ur response... still its not asking the authentication.that i allready create a file /etc/squid/squid_passwd.

anyother idea

?

gauravbajaj · « **Reply #3 on:** April 26, 2006, 10:34:59 AM »

ok

Have u tried all the things which i wrote above ...

?

Gaurav

Ricky · « **Reply #4 on:** May 01, 2006, 01:04:34 PM »

I think you must give look to this also --> NCSA authentication