Re: [SQU] authentication - stress

Ben Mckellar wrote:

> #Authentication program
> authenticate_program /usr/bin/htpasswd /root/squidpass

htpasswd can only generate the password file. It is not a password
validator.

For htpasswd generated password files, use ncsa_auth from the Squid
distribution.

Please note that for ncsa_auth your must make sure that the htpasswd
generated password file uses the crypt() algorithm (default on most
UNIX:es.. can be forced with the -d option on modern versions of
htpasswd)

> If anything needs to be compiled can you pleases gimmme some detailed
> isntructions on howto do it on redhat, cause i noticed a lot of the tar.gz
> stuff screws up.

fetch squid-2.3.STABLE4.tar.gz (or mostly any other Squid source
version).

tar zxvf squid-2.3.STABLE4.tar.gz
cd squid-2.3.STABLE4
./configure
make
cd auth_modules/NCSA
make
cp ncsa_auth /usr/lib/squid/

(only the last cp step needs to be done as root, and all the
configuration changes below. The configure and make steps can be done as
a ordinary user)

squid.conf:

authenticate_program /usr/lib/squid/ncsa_auth /etc/squid/passwd
acl password proxy_auth REQUIRED

... (the default stuff distributed in squid.conf)
http_access allow password
http_access deny all

Then create and populate /etc/squid/passwd using htpasswd (with the -d
option if your copy of htpasswd defaults to using MD5 hashes)..

--
Henrik Nordstrom
Squid hacker
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html