Re: [SQU] Getting authentication to work.

From: Jai Lamerton <jlamerto@dont-contact.us>
Date: Thu, 18 Jan 2001 11:24:14 +1100 (EST)

Thanks for that... It now asks to re auth but still TCP_DENIED.

This is the debug ACL's.

2001/01/18 11:01:46| aclDecodeProxyAuth: cleartext = 'jlamerto:testing'
2001/01/18 11:01:46| aclMatchProxyAuth: checking user 'jlamerto'
2001/01/18 11:01:46| aclMatchProxyAuth: user 'jlamerto' not yet known
2001/01/18 11:01:46| aclMatchAclList: returning 0
2001/01/18 11:01:46| aclCheck: checking password via authenticator
2001/01/18 11:01:46| aclDecodeProxyAuth: header = 'Basic
amxhbWVydG86UnVAM2FzZQ=='
2001/01/18 11:01:46| aclDecodeProxyAuth: cleartext = 'jlamerto:testing'
2001/01/18 11:01:46| aclLookupProxyAuthStart: going to ask authenticator
on jlamerto
2001/01/18 11:01:46| aclLookupProxyAuthDone: result = ERR
2001/01/18 11:01:46| aclCheck: checking 'http_access allow rubios
password'
2001/01/18 11:01:46| aclMatchAclList: checking rubios
2001/01/18 11:01:46| aclMatchAcl: checking 'acl rubios src
203.2.38.8/255.255.255.255'
2001/01/18 11:01:46| aclMatchIp: '203.2.38.8' found
2001/01/18 11:01:46| aclMatchAclList: checking password
2001/01/18 11:01:46| aclMatchAcl: checking 'acl password proxy_auth
REQUIRED '
2001/01/18 11:01:46| aclDecodeProxyAuth: header = 'Basic
amxhbWVydG86UnVAM2FzZQ=='
2001/01/18 11:01:46| aclDecodeProxyAuth: cleartext = 'jlamerto:testing'
2001/01/18 11:01:46| aclMatchProxyAuth: checking user 'jlamerto'
2001/01/18 11:01:46| aclMatchProxyAuth: authentication failed for user
'jlamerto'

Is this saying that the username and passwd is being passed to the auth
program as username:passwd with a ":" seperating them?

Jai

On Wed, 17 Jan 2001, Henrik Nordstrom wrote:

> If nothing happens (not even another login box) then you most likely
> have forgotten to turn of stdout buffering in your helper and your
> answer stays there when run non-interactively, never reaching Squid.
>
> In perl:
>
> $|=1;
>
> In C:
>
> setvbuf(stdout, NULL);
>
> --
> Henrik Nordstrom
> Squid hacker
>
>
> Jai Lamerton wrote:
> >
> > Hi all...
> >
> > I have just wrote me an authenticator program to return OK or ERR.
> >
> > My squid.conf has:
> > acl password proxy_auth REQUIRED
> > acl rubios src 203.2.38.8/255.255.255.255 # My client
> >
> > http_access allow rubios password
> > http_access deny all
> >
> > authenticate_program /usr/local/inst/squid/auth/auth
> >
> > I get asked for a username and passwd but nothing happens on the web
> > client.
> >
> > In the access.log I get:
> > 979707671.060 2 203.2.38.8 TCP_DENIED/407 1417 GET
> > http://www.linknet.com.au/ - NONE/- -
> >
> > Any ideas???
> >
> > Jai Lamerton.
> >
> > --
> > To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Wed Jan 17 2001 - 17:28:28 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:57:29 MST