Re: [squid-users] how to use the user auth parameters

On 24/09/2011 15:52, Eliezer Croitoru wrote:
> On 24/09/2011 15:37, Eliezer Croitoru wrote:
>> my squid is configured with
>> ./configure --prefix=/opt/squid32012 --includedir=/include
>> --mandir=/share/man --infodir=/share/info
>> --localstatedir=/opt/squid32012/var --disable-maintainer-mode
>> --disable-dependency-tracking --disable-silent-rules --enable-inline
>> --enable-async-io=8 --enable-storeio=ufs,aufs,diskd
>> --enable-removal-policies=lru,heap --enable-delay-pools
>> --enable-cache-digests --enable-underscores --enable-icap-client
>> --enable-follow-x-forwarded-for
>> --enable-digest-auth-helpers=ldap,password
>> --enable-negotiate-auth-helpers=squid_kerb_auth
>> --enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group
>>
>> --enable-arp-acl --enable-esi--disable-translation
>> --with-logdir=/opt/squid32012/var/log
>> --with-pidfile=/var/run/squid32012.pid --with-filedescriptors=65536
>> --with-large-files --with-default-user=proxy --enable-linux-netfilter
>> --enable-ltdl-convenience
>>
>> ver 3.2.0.12
>>
>> i have used the info on:
>> http://www.cyberciti.biz/tips/linux-unix-squid-proxy-server-authentication.html
>>
>>
>> cause it looks very good compared to others.
>>
>> but when im starting squid it shows an error about the unknow acl
>>
>> sorry for not having a lot of info i am doing a recompile of squid
>> version for something.
>>
>> Thanks
>> Eliezer
> there it is
> FATAL: ERROR: Invalid ACL: acl ncsa_users proxy_auth REQUIRED
>
ok got a little more.
on the nixcraft site people was talking about puttying the settings in
this specific form:

auth_param basic program /opt/squid32012/libexec/basic_ncsa_auth
/opt/squid32012/etc/passwords
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

acl ncsa_users proxy_auth REQUIRED

#added for user auth
http_access allow ncsa_users

but squid wont requied the passwords and will let everyone use the internet.

Thanks
Eliezer
Received on Sat Sep 24 2011 - 13:04:47 MDT