[squid-users] msnt_auth doesn't listen to denyusers/allowusers se ttings

From: Koen Van de Velde <koen.vdvelde@dont-contact.us>
Date: Wed, 2 Oct 2002 16:07:07 +0200

Hi,

I asked this question before, but the only suggestion I got was : try to use
an old version of msnt_auth. I don't think that's a good idea, so I hope
that someone has a better solution ...

versions & config :
- Redhat 7.2 , kernel 2.4.18
- Squid-2.4.STABLE6 (from squid-2.4.STABLE6-6.7.3.i386.rpm)
- msnt_auth version :
        Msntauth v2.0.3 (C) 2 Sep 2001 Stellar-X Antonino Iannella.
        Modified by the Squid HTTP Proxy team 26 Jun 2002
- etc/squid/msntauth.conf :
        server PROVHEMXM1 PROVHEMXM2 PROVHEMXM
        allowusers /usr/local/squid/etc/allowusers
        denyusers /usr/local/squid/etc/denyusers

Problem description :
* If allowusers is empty
  -> all nt-domain-users are authenticated
  -> incorrect logins are logged to /var/log/secure
        $ cd /etc/squid/
        $ cat allowusers
        $ /usr/lib/squid/msnt_auth
                koen.vdvelde SECRET
                OK
                administrator SECRET
                OK
                unknowUser SECRET
                ERR
        $ tail /var/log/secure
                Oct 2 15:49:34 GOOFY msnt_auth[1465]: Authentication failed
for user999.

* If allowusers is not empty
  -> no users are authenticated
  -> nothing is logged to /var/log/secure
        $ cat allowusers
                koen.vdvelde
        $ /usr/lib/squid/msnt_auth
                koen.vdvelde SECRET
                ERR
                administrator SECRET
                ERR
                unknowUser SECRET
                ERR
        $ tail /var/log/secure
                <nothing new>
        
please let me know what I'm doing wrong !

Thanks in advance,

Koen Van de Velde.
PROVIRON NV.
Received on Wed Oct 02 2002 - 08:07:09 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:10:34 MST