[squid-users] Reverse proxy auth problem

Hello,

I'm currentlly using Squid 2.6 as a reverse proxy for some hosting
project. So far the results were good, but when i have tried to add some
htaccess adding some auth on the webserver the troubles came in.

works fine : browser ------> [www]
Auth failure then http error 401 : browser -----> [squid] ------> [www]

Knowing that i will never use the proxy's auth mecanisms, has anyone has
any advice on this ?

Best regards,

Aurélien "beorn" Rougemont.

some information :

- linux 2.6 kernel (debian)
- squid -v gives :

    Squid Cache: Version 2.6.STABLE4
    configure options: '--prefix=/usr' '--exec_prefix=/usr'
    '--bindir=/usr/sbin' '--sbindir=/usr/sbin'
    '--libexecdir=/usr/lib/squid' '--sysconfdir=/etc/squid'
    '--localstatedir=/var/spool/squid' '--datadir=/usr/share/squid'
    '--enable-async-io' '--with-pthreads'
    '--enable-storeio=ufs,aufs,coss,diskd,null'
    '--enable-linux-netfilter' '--enable-linux-proxy' '--enable-arp-acl'
    '--enable-epoll' '--enable-removal-policies=lru,heap'
    '--enable-snmp' '--enable-delay-pools' '--enable-htcp'
    '--enable-cache-digests' '--enable-underscores'
    '--enable-referer-log' '--enable-useragent-log'
    '--enable-auth=basic,digest,ntlm' '--enable-carp'
    '--with-large-files' 'i386-debian-linux'
    'build_alias=i386-debian-linux' 'host_alias=i386-debian-linux'
    'target_alias=i386-debian-linux

- squid .conf is :

    http_port A.B.C.D:80 vhost vport
    http_port E.F.G.H:80 vhost vport
    http_port 127.0.0.1:80
    icp_port 0
    cache_peer 192.168.66.52 parent 80 0 originserver default
    #cache_effective_user squid
    #cache_effective_group squid
    maximum_object_size_in_memory 20 MB
    cache_mem 256 MB
    cache_swap_low 94
    cache_swap_high 98
    maximum_object_size 512 MB
    cache_dir ufs /var/spool/squid 20480 256 256
    cache_mgr servers@url.com
    visible_hostname the.url.com
    memory_pools on
    memory_pools_limit 32 MB
    logformat combined %{Host}>h %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h" %Ss:%Sh
    logformat vcombined %{Host}>h %>a %ui %un [%tl] "%rm %ru HTTP/%rv" %Hs %<st "%{Referer}>h" "%{User-Agent}>h"
    access_log /var/log/squid/access.log combined
    access_log /var/log/squid/vaccess.log vcombined
    cache_store_log /var/log/squid/store.log
    cache_log /var/log/squid/cache.log
    logfile_rotate 60
    collapsed_forwarding on
    vary_ignore_expire on
    acl all src 0.0.0.0/0.0.0.0
    acl localhost src 127.0.0.1/255.255.255.255
    acl manager proto cache_object
    acl from_localhost src 127.0.0.1/255.255.255.255
    acl from_dmz src 192.168.66.0/24
    acl to_accel_hosts dst A.B.C.D/255.255.255.255
    http_access allow to_accel_hosts
    http_access allow from_dmz
    http_access allow manager from_localhost
    http_access deny manager
    http_access deny all
    #deny_info http://the.url.com from_all
Received on Mon Nov 20 2006 - 08:36:11 MST