[squid-users] Squid under OS Win2000: Problem with the authentification of the client

From: Clemens Wohlfart <cwohlfart@dont-contact.us>
Date: Thu, 16 Jun 2005 11:08:12 +0200

Hi,
it is my first installation from a proxy server. I have a problem with the
authentication from the client. It does not work.

This are my test environment:

OS: Windows 2000

Squid version 2.5

Configuration the squid.conf:

http_port 3128
htcp_port 4827
auth_param basic program /squid/libexec/ncsa_auth.exe /squid/etc/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl our_network src 172.27.0.0/16
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl friends ident user our_network clemens service administrator ncsa_user
acl clemo proxy_auth REQUIRED
http_access deny !Safe_ports
http_access allow friends our_network
http_access deny friends
http_access allow clemo our_network
http_access deny clemo
http_access allow manager localhost
http_access deny manager
icp_access allow all
cache_mgr cwohlfart@amadeus.net
visible_hostname X06261AP

used format encode for the user/passwd: Base64

The user und password is encode in the file passwd with the format MD05

I had installed the program Filemon (www.sysinternals.com) one the proxy
PC. This program check the access to the files from the applications. I
started the squid proxy server.

   If the client tried to connect the proxy server, the application squid
or the second application ncsa_Fauth.exe did not have an access to the
file
passwd.
 
 I started the application ncsa=5Fauth.exe separate after that. If the
client tried to connect the proxy server, the application
ncsa=5Fauth.exe=20
open, read and close the file passwd. But the authentication failed from
the client.

Question:
What is here wrong?
Is the format of the passwd MD05?
Why must I started the application ncsa_Fauth.exe separat too?

Best regards

Clemens Wohlfart
Received on Thu Jun 16 2005 - 04:08:54 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Jul 01 2005 - 12:00:02 MDT