Re: [squid-users] Authentication Hack

On Wed, Mar 5, 2008 at 11:20 AM, Michael Graham wrote:
> deny_info http://myhost/login.cgi?url=%s ipauthACL
>
> then the login page will be your cgi script and as an added bonus you'll
> get url set as the original url that caused the deny. Then you can
> redirect to it after a successful login.
>
>

Okay, thanks. I'll try that.

However, it appears that, when the screen goes blank (ie, when I'm
expecting my login page to appear), it's actually crashing Squid.

I've revised my helper script slightly (the STDIN apparently has a
newline which confused the script):

1:#!/usr/bin/perl
2:$| = 1;
3:$ip=<STDIN>;
4:$ip=chomp($ip);
5:$ipfile='/var/www/apache2-default/cgi-bin/ips/'.$ip;
6:#print $ipfile;
7:if (-e $ipfile){print "OK";}
8:else {print "ERR : ".$ip;}

This appears in the cache.log:

2008/03/05 11:33:44| WARNING: ipauth #1 (FD 7) exited
2008/03/05 11:33:44| WARNING: ipauth #2 (FD 8) exited
2008/03/05 11:33:44| WARNING: ipauth #3 (FD 9) exited
2008/03/05 11:33:44| Too few ipauth processes are running
2008/03/05 11:33:44| storeDirWriteCleanLogs: Starting...
2008/03/05 11:33:44| Finished. Wrote 195 entries.
2008/03/05 11:33:44| Took 0.0 seconds (874439.5 entries/sec).
FATAL: The ipauth helpers are crashing too rapidly, need help!

Squid Cache (Version 2.6.STABLE18): Terminated abnormally.

Squid then seems to restart without a problem. (Which is why I thought
the redirection behaviour was to blame.)

Damned if I can see what is going wrong....

Thanks again for your assistance.
Received on Wed Mar 05 2008 - 02:43:02 MST