[squid-users] Error Authenticate the Users

From: Chris B. <[email protected]>
Date: Sun, 3 Nov 2002 23:26:50 +0100

Hello

I installed the Squid-2.5_STABLE on RedHat 7.3 and an Intel-P4.
I used the follow installation:

------------- 8< -------------- 8< ---------------
./configure --disable-carp --disable-icmp --disable-delay-pools
--enable-useragent-log --enable-referer-log --disable-wccp
--disable-snmp --disable-arp-acl --disable-htcp --enable-ssl
--disable-forw-via-db --disable-cache-digests
--enable-default-err-language=German --disable-ident-lookups
--enable-auth=basic --enable-basic-auth-helpers=PAM
--enable-http-violations
------------- 8< -------------- 8< ---------------

And used the follow configuration:
------------- 8< -------------- 8< ---------------
Auth_param basic program /usr/local/squid/libexex/pam_auth
Auth_param basic children 100
Auch_param basic realm Irgendwas
Auth_param basic credentialsttl 4 hours
Authenticate_ip_ttl 60 seconds
Acl AuthUsers proxy_auth REQUIRED
Http_access allow AuthUsers
Http_access deny all
------------- 8< -------------- 8< ---------------

Then, I created the necessary squid-file in /etc/pam.d/.

So, if I'm starting to surf in the Internet, I got the
authenticate-window and after I entered the username and password I must
wait 60 seconds bevor the correct site is displayed in the browser.
All requests after them are ok and without waitings.

In the cache.log, i've many entries like this:
------------- 8< -------------- 8< ---------------
2002/11/03 22:27:21| authenticateAuthenticate: no connection data,
cannot process authentication
------------- 8< -------------- 8< ---------------

If I don't use authentication, but IP-based rules, all request are ok
and without any waitings.

Have anyone an idea? I'm testing various configuration and installation,
but the error are always the same. And although I don't find any
helpfull information on the Internet.

Oh, the MySQL-Database for PAM-Auth are ok and any other programs like
cyrus or postfix work correctly without any waitings.

Thanks for any idea!

Regards
Christian
Received on Sun Nov 03 2002 - 15:26:57 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:08 MST