Re: [squid-users] squid not asking for authentication

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 18 Jul 2008 17:41:28 +1200

ananttickoo wrote:
>
>
> Amos Jeffries-2 wrote:
>> ananttickoo wrote:
>>>
>>> ananttickoo wrote:
>>>> i am trying to set up a squid but its not asking for authentication..
>>>> were
>>>> am i going wrong i not able to find out
>>>> this is what i am doing
>>>>
>>>>
>>>> i am using UBUNTU
>>>>
>>>> NIC that i am using is having ip 192.168.7.253
>>>>
>>>> static ip-192.168.7.253
>>>> netmask-255.255.255.0
>>>> gateway address-192.168.7.254
>>>>
>>>> give my pc a name in host file
>>>> 192.168.7.253 = testmachine
>>>>
>>>> then install squid
>>>> 2}apt-get install squid-common
>>>> 3}apt-get install apache2-utils
>>>>
>>>> 4)then chown proxy:proxy /etc/squid/squid.conf
>>>> 5)now create user htpasswd -c /etc/squid/passwd garima
>>>> passwrd -garima
>>>> 6} chmod o+r /etc/squid/passwd
>>>> 7)then i do the setting squid.conf
>>>>
>>>> 1}auth_param basic program /usr/lib/squid/ncsa_users /etc/squid/passwd
>>>> auth_param basic children 5
>>>> auth_param basic realm SQUID s there
>>>> auth_param basic credtinal 2 hours
>>>> auth_param basic cassesitive 0ff
>>>> now acl list
>>>> 2}acl ncsa_users proxy_auth REQUIRED
>>>> acl internal_network src 192.168.7.253
>>>> acl password proxy_auth REQUIRED
>>>> now http turn
>>>> 3}http_access allow internal_network
>>>> http_access allow ncsa_users
>>>> http_access allow password
>>>> now save nd close this
>>>> 8}now http_port 3128
>>>> 9}now we have to rout the traffic
>>>> iptables -L
>>>> it will show firewalls are disable
>>>> 10}vi /etc/iptables.rules
>>>> now add
>>>> iptables -t nat -A PREROUTING -i eth0 -p tcp ---dport 80 -j REDIRECT
>>>> --to-port 3128
>>>> save and close this
>>>> 11)now do iptables-save > /etc/iptables.rules
>>>> 12) now to vi /etc/network/interfaces
>>>> 13)now /etc/init.d/squid restart
>>>> 14)now /etc/init.d/networking restart
>>>>
>>>>
>>>> its still not working ... not asking for password
>>>>
>>>>
>>>> were am i going wrong
>>>>
>>>
>>> only thing i have messed with is that i have redirected the port 80 to
>>> 3128.
>>> that has messed the whole thing up ...
>>>
>> Did you see my earlier reply?
>> Standard Authentication cannot be done on intercepted requests.
>> Client either have knowledge of the proxy and authenticates, or doesn't.
>>
>> Amos
>> --
>> Please use Squid 2.7.STABLE3 or 3.0.STABLE7
>>
>>
>
>
> sorry i am a new to this .. if only you could explain. or just give me some
> link were i can get knowladge abt this....
>

This make good reading on the subject:
  http://wiki.squid-cache.org/SquidFaq/InterceptionProxy

Particularly this bit about auth failing:
http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-e56904dd4dfe0e21e5c2903473c473d401533ac7

Amos

-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE7
Received on Fri Jul 18 2008 - 05:41:19 MDT

This archive was generated by hypermail 2.2.0 : Fri Jul 18 2008 - 12:00:04 MDT