[squid-users] Cannot get ncsa_auth to work

From: MisterWolfe <mister.raven_at_gmail.com>
Date: Thu, 9 Apr 2009 16:27:37 -0700 (PDT)

What follows is my squid.conf - can you please help me figure out why ncsa
auth is not working? is my conf file screwed up somehow?

thanks!!!

###Specifies the NCSA user Authentication
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm FVRL Wireless Internet Login
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
icp_access deny all
htcp_access deny all
http_port 216.251.148.194:3128 transparent
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320
icp_port 3130
coredump_dir /var/spool/squid

cache_effective_user squid

##Block sites manually through the squid file and not the blocklist using
the following commands

#acl blocksites dstdomain .foo.com
#http_access deny blocksites

#acl blockregexurl url_regex -i sex gun drug violence cult porn pr0n
#http_access deny blockregexurl

###Allow these networks to use the proxy service

#always_direct allow all
acl our_networks src 192.168.1.0/24 216.251.148.195 216.251.148.194
http_access allow our_networks

##Specifies the squidGuard bin and conf file for the URL black lists

redirect_program /usr/local/bin/squidGuard -c
/usr/local/squidGuard/squidGuard.conf

###Specifies the NCSA user Authentication

#auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
#auth_param basic children 5
#auth_param basic realm FVRL Wireless Internet Login
#auth_param basic credentialsttl 2 hours
#auth_param basic casesensitive off

#acl ncsa_users proxy_auth REQUIRED
#http_access allow ncsa_users

#####DELAY POOLS - bandwidth limiting portion of conf file.
#This is the most important part for shaping incoming traffic with Squid
#For detailed description see squid.conf file or docs at
http://www.squid-cache.org
 
#We don't want to limit downloads on our local network.
acl magic_words1 url_regex -i 192.168
 
#We want to limit downloads of these type of files
#Put this all in one line
acl magic_words2 url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .rpm .zip .rar
.avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov
#We don't block .html, .gif, .jpg and similar files, because they
#generally don't consume much bandwidth

#We want to limit bandwidth during the day, and allow
#full bandwidth during the night
#Caution! with the acl below your downloads are likely to break
#at 23:59. Read the FAQ in this bandwidth if you want to avoid it.
acl day time 09:00-23:59
 
#We have two different delay_pools
#View Squid documentation to get familiar
#with delay_pools and delay_class.
delay_pools 2
 
#First delay pool
#We don't want to delay our local traffic.
#There are three pool classes; here we will deal only with the second.
#First delay class (1) of second type (2).
delay_class 1 2
 
#-1/-1 mean that there are no limits.
delay_parameters 1 -1/-1 -1/-1
 
#magic_words1: 192.168 we have set before
delay_access 1 allow magic_words1
 

#Second delay pool.
#we want to delay downloading files mentioned in magic_words2.
#Second delay class (2) of second type (2).
delay_class 2 2
 
#The numbers here are values in bytes;
#we must remember that Squid doesn't consider start/stop bits
#5000/150000 are values for the whole network
#5000/120000 are values for the single IP
#after downloaded files exceed about 150000 bytes,
#(or even twice or three times as much)
#they will continue to download at about 5000 bytes/s
 
delay_parameters 2 5000/150000 5000/120000
#We have set day to 09:00-23:59 before.
delay_access 2 allow day
delay_access 2 deny !day
delay_access 2 allow magic_words2

#EOF

-- 
View this message in context: http://www.nabble.com/Cannot-get-ncsa_auth-to-work-tp22980872p22980872.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Thu Apr 09 2009 - 23:27:40 MDT

This archive was generated by hypermail 2.2.0 : Fri Apr 10 2009 - 12:00:03 MDT