Help

Hello all,

Running RH 6.1 with freshly installed 2.3Stable4, pam_auth, and
pam_ncp_auth trying to authenticate to a Netware server. Secure
log shows authentication working through ncpfs, but I am denied
access. Here are the contents of cache.log:

2000/08/01 12:31:02| Starting Squid Cache version
2.3.STABLE4 for i686-pc-linux-gnu...
/08/01 12:31:02| Process ID 9848
/08/01 12:31:02| With 1024 file descriptors available
/08/01 12:31:02| Performing DNS Tests...
/08/01 12:31:02| Successful DNS name lookup tests...
/08/01 12:31:02| DNS Socket created on FD 1
/08/01 12:31:02| Adding nameserver xxx.xxx.xxx.xxx from
/etc/resolv.conf
/08/01 12:31:02| Adding nameserver xxx.xxx.xxx.xxx from
/etc/resolv.conf
/08/01 12:31:02| helperOpenServers: Starting 5
'pam_auth' processes
/08/01 12:31:02| Unlinkd pipe opened on FD 11
/08/01 12:31:02| Swap maxSize 102400 KB, estimated 7876
objects
/08/01 12:31:02| Target number of buckets: 157
/08/01 12:31:02| Using 8192 Store buckets
/08/01 12:31:02| Max Mem size: 8192 KB
/08/01 12:31:02| Max Swap size: 102400 KB
/08/01 12:31:02| Store logging disabled
/08/01 12:31:02| Rebuilding storage in /var/spool/squid
(DIRTY)
/08/01 12:31:02| Set Current Directory to
/var/spool/squid
/08/01 12:31:02| Loaded Icons.
/08/01 12:31:02| Accepting HTTP connections at 0.0.0.0,
port 3128, FD 10.
/08/01 12:31:02| Accepting ICP messages at 0.0.0.0,
port 3130, FD 12.
/08/01 12:31:02| Accepting SNMP messages on port 3401,
FD 13.
/08/01 12:31:02| WCCP Disabled.
/08/01 12:31:02| Ready to serve requests.
/08/01 12:31:03| Done scanning /var/spool/squid swaplog
(0 entries)
/08/01 12:31:03| Finished rebuilding storage from disk.
/08/01 12:31:03| 0 Entries scanned
/08/01 12:31:03| 0 Invalid entries.
/08/01 12:31:03| 0 With invalid flags.
/08/01 12:31:03| 0 Objects loaded.
/08/01 12:31:03| 0 Objects expired.
/08/01 12:31:03| 0 Objects cancelled.
/08/01 12:31:03| 0 Duplicate URLs purged.
/08/01 12:31:03| 0 Swapfile clashes avoided.
/08/01 12:31:03| Took 0.4 seconds ( 0.0
objects/sec).
/08/01 12:31:03| Beginning Validation Procedure
/08/01 12:31:03| Completed Validation Procedure
/08/01 12:31:03| Validated 0 Entries
/08/01 12:31:03| store_swap_size = 0k
/08/01 12:31:03| storeLateRelease: released 0 objects
/08/01 12:40:39| Restarting Squid Cache (version
2.3.STABLE4)...
/08/01 12:40:39| FD 10 Closing HTTP connection
/08/01 12:40:39| FD 12 Closing ICP connection
/08/01 12:40:39| FD 13 Closing SNMP socket
/08/01 12:40:39| Cache dir '/var/spool/squid' size
remains unchanged at 102400 KB
/08/01 12:40:39| DNS Socket created on FD 1
/08/01 12:40:39| Adding nameserver xxx.xxx.xxx.xxx from
/etc/resolv.conf
/08/01 12:40:39| Adding nameserver xxx.xxx.xxx.xxx from
/etc/resolv.conf
/08/01 12:40:39| helperOpenServers: Starting 5
'pam_auth' processes
/08/01 12:40:40| Accepting HTTP connections at 0.0.0.0,
port 3128, FD 3.
/08/01 12:40:40| Accepting ICP messages at 0.0.0.0,
port 3130, FD 10.
/08/01 12:40:40| Accepting SNMP messages on port 3401,
FD 12.
/08/01 12:40:40| WCCP Disabled.
/08/01 12:40:40| Loaded Icons.
/08/01 12:40:40| Ready to serve requests.
/08/01 12:44:15| aclCheckFast: list: 0x8205cc8
/08/01 12:44:15| aclMatchAclList: checking all
/08/01 12:44:15| aclMatchAcl: checking 'acl all src
0.0.0.0/0.0.0.0'
/08/01 12:44:15| aclMatchIp: '172.16.128.132' found
/08/01 12:44:15| aclMatchAclList: returning 1
/08/01 12:44:15| aclCheck: checking 'http_access allow
manager localhost'
/08/01 12:44:15| aclMatchAclList: checking manager
/08/01 12:44:15| aclMatchAcl: checking 'acl manager
proto cache_object'
/08/01 12:44:15| aclMatchAclList: returning 0
/08/01 12:44:15| aclCheck: checking 'http_access deny
manager'
/08/01 12:44:15| aclMatchAclList: checking manager
/08/01 12:44:15| aclMatchAcl: checking 'acl manager
proto cache_object'
/08/01 12:44:15| aclMatchAclList: returning 0
/08/01 12:44:15| aclCheck: checking 'http_access deny
!Safe_ports'
/08/01 12:44:15| aclMatchAclList: checking !Safe_ports
/08/01 12:44:15| aclMatchAcl: checking 'acl Safe_ports
port 80 21 443 563 70 210 1025-65535'
/08/01 12:44:15| aclMatchAclList: returning 0
/08/01 12:44:15| aclCheck: checking 'http_access deny
CONNECT !SSL_ports'
/08/01 12:44:15| aclMatchAclList: checking CONNECT
/08/01 12:44:15| aclMatchAcl: checking 'acl CONNECT
method CONNECT'
/08/01 12:44:15| aclMatchAclList: returning 0
/08/01 12:44:15| aclCheck: checking 'http_access allow
password'
/08/01 12:44:15| aclMatchAclList: checking password
/08/01 12:44:15| aclMatchAcl: checking 'acl password
proxy_auth REQUIRED'
/08/01 12:44:15| aclDecodeProxyAuth: header = 'Basic
cHpzOmxhbWVy'
/08/01 12:44:15| aclDecodeProxyAuth: cleartext =
'pzs:lamer'
/08/01 12:44:15| aclMatchProxyAuth: checking user 'pzs'
/08/01 12:44:15| aclMatchProxyAuth: user 'pzs' not yet
known
/08/01 12:44:15| aclMatchAclList: returning 0
/08/01 12:44:15| aclCheck: checking password via
authenticator
/08/01 12:44:15| aclDecodeProxyAuth: header = 'Basic
cHpzOmxhbWVy'
/08/01 12:44:15| aclDecodeProxyAuth: cleartext =
'pzs:lamer'
/08/01 12:44:15| aclLookupProxyAuthStart: going to ask
authenticator on pzs
/08/01 12:44:15| aclLookupProxyAuthDone: result = ERR
/08/01 12:44:15| aclCheck: checking 'http_access allow
password'
/08/01 12:44:15| aclMatchAclList: checking password
/08/01 12:44:15| aclMatchAcl: checking 'acl password
proxy_auth REQUIRED'
/08/01 12:44:15| aclDecodeProxyAuth: header = 'Basic
cHpzOmxhbWVy'
/08/01 12:44:15| aclDecodeProxyAuth: cleartext =
'pzs:lamer'
/08/01 12:44:15| aclMatchProxyAuth: checking user 'pzs'
/08/01 12:44:15| aclMatchProxyAuth: authentication
failed for user 'pzs'
/08/01 12:44:15| aclMatchAclList: returning 0
/08/01 12:44:15| aclCheck: match found, returning 2
/08/01 12:44:15| aclCheckCallback: answer=2
/08/01 12:44:20| aclCheckFast: list: 0x8205cc8
/08/01 12:44:20| aclMatchAclList: checking all
/08/01 12:44:20| aclMatchAcl: checking 'acl all src
0.0.0.0/0.0.0.0'
/08/01 12:44:20| aclMatchIp: '172.16.128.132' found
/08/01 12:44:20| aclMatchAclList: returning 1
/08/01 12:44:20| aclCheck: checking 'http_access allow
manager localhost'
/08/01 12:44:20| aclMatchAclList: checking manager
/08/01 12:44:20| aclMatchAcl: checking 'acl manager
proto cache_object'
/08/01 12:44:20| aclMatchAclList: returning 0
/08/01 12:44:20| aclCheck: checking 'http_access deny
manager'
/08/01 12:44:20| aclMatchAclList: checking manager
/08/01 12:44:20| aclMatchAcl: checking 'acl manager
proto cache_object'
/08/01 12:44:20| aclMatchAclList: returning 0
/08/01 12:44:20| aclCheck: checking 'http_access deny
!Safe_ports'
/08/01 12:44:20| aclMatchAclList: checking !Safe_ports
/08/01 12:44:20| aclMatchAcl: checking 'acl Safe_ports
port 80 21 443 563 70 210 1025-65535'
/08/01 12:44:20| aclMatchAclList: returning 0
/08/01 12:44:20| aclCheck: checking 'http_access deny
CONNECT !SSL_ports'
/08/01 12:44:20| aclMatchAclList: checking CONNECT
/08/01 12:44:20| aclMatchAcl: checking 'acl CONNECT
method CONNECT'
/08/01 12:44:20| aclMatchAclList: returning 0
/08/01 12:44:20| aclCheck: checking 'http_access allow
password'
/08/01 12:44:20| aclMatchAclList: checking password
/08/01 12:44:20| aclMatchAcl: checking 'acl password
proxy_auth REQUIRED'
/08/01 12:44:20| aclDecodeProxyAuth: header = 'Basic
cHpzOmxhbWVy'
/08/01 12:44:20| aclDecodeProxyAuth: cleartext =
'pzs:password'
/08/01 12:44:20| aclMatchProxyAuth: checking user 'pzs'
/08/01 12:44:20| aclMatchProxyAuth: user 'pzs' not yet
known
/08/01 12:44:20| aclMatchAclList: returning 0
/08/01 12:44:20| aclCheck: checking password via
authenticator
/08/01 12:44:20| aclDecodeProxyAuth: header = 'Basic
cHpzOmxhbWVy'
/08/01 12:44:20| aclDecodeProxyAuth: cleartext =
'pzs:password'
/08/01 12:44:20| aclLookupProxyAuthStart: going to ask
authenticator on pzs
/08/01 12:44:21| aclLookupProxyAuthDone: result = ERR
/08/01 12:44:21| aclCheck: checking 'http_access allow
password'
/08/01 12:44:21| aclMatchAclList: checking password
/08/01 12:44:21| aclMatchAcl: checking 'acl password
proxy_auth REQUIRED'
/08/01 12:44:21| aclDecodeProxyAuth: header = 'Basic
cHpzOmxhbWVy'
/08/01 12:44:21| aclDecodeProxyAuth: cleartext =
'pzs:lamer'
/08/01 12:44:21| aclMatchProxyAuth: checking user 'pzs'
/08/01 12:44:21| aclMatchProxyAuth: authentication
failed for user 'pzs'
/08/01 12:44:21| aclMatchAclList: returning 0
/08/01 12:44:21| aclCheck: match found, returning 2
/08/01 12:44:21| aclCheckCallback: answer=2

Any ideas?

Thanks
Received on Tue Aug 01 2000 - 12:58:35 MDT