Re: [squid-users] Squid/heartbeat/pam_auth => login problem

From: Chris Robertson <crobertson@dont-contact.us>
Date: Mon, 04 Feb 2008 12:24:43 -0900

`VL wrote:
> Hello.
> Recently i setup backup server with heartbeat for my proxy.
> Squid setup is very simple, it uses pam_auth for user authorisation
> and http authentication. Works fine.
>
> Backup server is exact copy of primary ,except some system config files.
> Both systems are Debian 4.0/squid 2.6.5-6. Squid cache/logs are on DRBD disk.
>

What is pam_auth using for it's authentication source (shadow file,
LDAP, NIS?). If needed, how are you replicating the authentication
resources?

> Squid on primary server works just fine - users successfully login and
> access internet.
>
> When i move resources to backup node, squid starts ok, listens for connection
> and users are prompted for password when they try to access internet. But
> proxy doesn`t allow them to do it - it keeps asking password.
>
> I don`t understand what`s going on: config is the same, binaries are the same,
> client restarted browser.
>
> Maybe there are some things i don`t understand about how squid
> authenticates users?
> Which logs should i watch and what should i see there to understand
> where the problem is?
>

I'd have to guess that the data source pam_auth is using on the primary
is not available from the backup.

> P.S. When i switch back to primary node - all works OK.
>

Chris
Received on Mon Feb 04 2008 - 14:25:01 MST

This archive was generated by hypermail pre-2.1.9 : Sat Mar 01 2008 - 12:00:04 MST