Re: [squid-users] Authntication loop

From: csampath <csampath_at_gmail.com>
Date: Wed, 17 Jun 2009 00:35:36 -0700 (PDT)

Hi ,

Nice to see your quick response.

I compiled with --enable-linux-netfilter configuration. You mean to say
compile squid with out that flag to run squid in accel mode ?

I tried with out vhost and vport . Just giving the defaultsite=XXXXX.xom

request is not going to the correct URL.

Any suggestion in the config file ?
-Sampath

Chris Robertson-2 wrote:
>
> csampath wrote:
>> Hi All,
>>
>> I am using squid3.0 satble 15.
>>
>> I am facing the authentication loop . For a page to load squid is asking
>> for
>> 3 to 5 times (may be for each ajax request)
>>
>> When I give wrong password it is saying
>>
>> Sorry, you are not currently allowed to request http://yahoo.com from
>> this
>> cache until you have authenticated yourself.
>>
>> When I give correct password it is asking repeatedly (for every click)
>>
>> Here is my squid configuration.
>>
>>
>> http_port 3128 accel vport vhost
>>
>> auth_param basic program /usr/lib64/squid/squid_radius_auth -f
>> /etc/squid/squid_radius_conf
>> auth_param basic children 2
>> auth_param basic realm Squid proxy-caching web server
>> auth_param basic credentialsttl 2 hours
>> acl radius-auth proxy_auth REQUIRED
>> http_access deny all !radius-auth
>> http_access deny !radius-auth all
>> http_access allow all
>> http_reply_access allow all
>> visible_hostname localhost
>> #miss_access allow all
>> cache deny all
>> always_direct allow all
>>
>> can any one suggest me the order of http_access entries in the
>> configuration
>> file?
>>
>
> From the information given, I gather that you are running an
> interception proxy. The accel argument to http_port is meant for
> acceleration setups, not for interception setups. I further surmise
> that you chose to go the "accel vport vhost" route because using
> "transparent" gave configuration errors with authentication.
>
> There is a reason for that.
> http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-e56904dd4dfe0e21e5c2903473c473d401533ac7
>
>> Appreciate your response.
>>
>> Thanks
>> -Sampath.
>
> Chris
>
>

-- 
View this message in context: http://www.nabble.com/Authntication-loop-tp24052068p24068440.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Wed Jun 17 2009 - 07:35:44 MDT

This archive was generated by hypermail 2.2.0 : Thu Jun 18 2009 - 12:00:04 MDT