Re: [squid-users] Problems with Digest Authentication.

From: Ian Barton <lists_at_manor-farm.org>
Date: Sun, 05 Jul 2009 08:48:42 +0100

Amos Jeffries wrote:
> Ian Barton wrote:
>> I have set up a Squid proxy on my Linode for use when I am away from
>> home and need to use a proxy. In order to stop anyone being able to
>> use it I have set up authorization.
>>
>> If I use basic authorization it all works correctly. I get prompted to
>> enter my user name and password and I can start browsing. However, I
>> want to set up digest authentication, so my password isn't transmitted
>> in plain text.
>>
>> When I enable digest authorization, I get prompted to enter my
>> credentials, which are accepted. The browser then keeps contacting the
>> site, but nothing is displayed. In my squid logs I see:
>>
>> 1246527762.271 15 217.146.125.41 TCP_DENIED/407 1796 GET
>> http://thetimes.co.uk/ ian NONE/- text/html
>> 1246527762.894 19 217.146.125.41 TCP_DENIED/407 1796 GET
>> http://thetimes.co.uk/ ian NONE/- text/html
>> 1246527763.553 21 217.146.125.41 TCP_DENIED/407 1796 GET
>> http://thetimes.co.uk/ ian NONE/- text/html
>>
>> Here is the relevant bit of squid.conf:
>>
>>
>> auth_param digest program /usr/lib/squid/digest_pw_auth -c
>> /etc/squid/htdigest.squid
>> auth_param digest children 5
>> auth_param digest realm "Squid Proxy Server"
>> auth_param digest nonce_garbage_interval 5 minutes
>> auth_param digest nonce_max_duration 30 minutes
>> auth_param digest nonce_max_count 50
>> acl digest_users proxy_auth REQUIRED
>> http_access allow digest_users
>>
>> I am using the version of Squid that comes with Debian Lenny.
>
> There are two that come with Lenny.
>
> "squid -v" or "dpkg --list | grep squid" will say which.
>
> I suspect there is a problem either with the browser support or the
> digest helper.
>
I am using:

ii squid 2.7.STABLE3-4.1 Internet
object cache (WWW proxy cache)

My browser is Firefox 3.0.11.

Ian.
Received on Sun Jul 05 2009 - 07:48:47 MDT

This archive was generated by hypermail 2.2.0 : Sun Jul 05 2009 - 12:00:02 MDT