Re: Secure basic authentication (or digest_pw_auth) - have a problems.

On Thu, 3 Jun 2004, [koi8-r] "Slivarez![koi8-r] " wrote:

>
> To avoid transmiting passwords in LAN in plain taext I tried to use digest_pw_auth (like Henrik Nordstrom said).
>
> squid.conf:
> **************************************************************************************************
> auth_param digest program /usr/local/libexec/digest_pw_auth /usr/local/etc/pass_d
> auth_param digest children 5
> auth_param digest realm myrealm
> auth_param digest nonce_garbage_interval 5 minutes
> auth_param digest nonce_max_duration 30 minutes
> auth_param digest nonce_max_count 50
>
> acl users proxy_auth REQUIRED
> http access allow users
> http_access deny all
> **************************************************************************************************
>
>
> File pass_d i've created by htdigest utility from Apache2 package.

Which version of the digetst_pw_auth helper are you using? The version in
2.5.STABLE only understands plain-text password files

  user:password

The user in 3.0 CVS versions understands Apache htdigest type password
files in addition to plain text (and works with Squid-2.5).

Regards
Henrik
Received on Thu Jun 03 2004 - 14:13:26 MDT