[squid-users] MSNT Auth v2.0.1

From: Freitag, Thoralf <[email protected]>
Date: Thu, 13 Dec 2001 08:23:26 +0100

Hello,

I tried to test our Squid web proxy Authentication module. First, it works.
But it dosn't like I won't.

If try to give access rights to one or more Users, all accesses are
rejected:

spider:/opt/SQUID/libexec # ./msnt_auth
MyUser MyPassword
ERR
MyDomain\MyUser MyPassword
ERR
MyDomain/MyUser MyPassword
ERR

the syslog says:

Dec 12 13:44:20 spider msnt_auth: Check_fordenychange: Reloading denied user
list.
Dec 12 13:44:20 spider msnt_auth: Check_forallowchange: Reloading allowed
user list.
Dec 12 13:44:20 spider msnt_auth: Denied access to user ' '.
Dec 12 13:44:41 spider msnt_auth: Denied access to user ' '.
Dec 12 13:44:56 spider msnt_auth: Denied access to user ' '.

My Configuration

tfreitag@spider:~/tmp/squid-head-200112110000> vi
src/auth/basic/helpers/MSNT/confload.c

        #define CONFIGFILE "/opt/SQUID/etc/msntauth.conf" /* Path to
configuration file */
        #define DENYUSERSDEFAULT "/opt/SQUID/etc/denyusers"
        #define ALLOWUSERSDEFAULT "/opt/SQUID/etc/allowusers"

spider:/home/tfreitag/tmp/squid-head-200112110000 # vi
/opt/SQUID/etc/msntauth.conf

        # Sample MSNT authenticator configuration file
        # Antonino Iannella, Stellar-X Pty Ltd
        # Tue Sep 26 17:26:59 CST 2000

        server BDC PDC MyDomain

        denyusers /opt/SQUID/etc/denyusers
        allowusers /opt/SQUID/etc/allowusers

If the /opt/SQUID/etc/allowusers is empty, the auhentification works fine.

spider:/opt/SQUID/libexec # ./msnt_auth
MyUser MyPassword
ERR
MyDomain\MyUser MyPassword
ERR
MyDomain/MyUser MyPassword
ERR

Syslog:

Dec 12 13:49:39 spider msnt_auth: Check_fordenychange: Reloading denied user
list.
Dec 12 13:49:39 spider msnt_auth: Check_forallowchange: Reloading allowed
user list.
Dec 12 13:49:42 spider msnt_auth: Authentication failed for MyDomain\MyUser
MyPassword.
Dec 12 13:50:00 spider msnt_auth: Authentication failed for MyDomain/MyUser
MyPassword.

Do you have any ideas what could I do ?

Remark: The place of msntauth.conf, allowusers and denyusers are not
configured by squid "configure".

Mit freundlichen Gruessen

Thoralf Freitag
Berliner Glas KGaA
Herbert Kubatz GmbH & Co.
IT-Servicecenter

Tel. +49-30-60905-555 (Hotline)
Tel. +49-30-60905-152 (direkt)
Fax +49-30-60905-100
mail Thoralf.Freitag@berlinerglas.de
<mailto:Thoralf.Freitag@berlinerglas.de>
web http://www.berlinerglas.de <http://www.berlinerglas.de>
Received on Thu Dec 13 2001 - 00:23:28 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:20 MST