Система debian sarge, squid 2.5.9 squid работает без проблем без аутентификации; пытаюсь сделать basic аутентификацию (пробовал для digest - та же проблема), появляется окно с приглашением ввести пароль, и дальше страница не загружается. Есть подозрение, что не запускается процесс ncsa_auth (кстати, должен ли он быть в списке процессов при запущенном сквиде?) Права доступа и пути - правильные (для файла паролей proxy:proxy), ncsa_auth работает в консоли без проблем, из-под пользователя proxy тоже. Конфиг: auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/squid_passwd auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours auth_param basic casesensitive off acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl localnet src 192.168.128.0/24 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 # https, snews acl SSL_ports port 873 # rsync acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl Safe_ports port 631 # cups acl Safe_ports port 873 # rsync acl Safe_ports port 901 # SWAT acl purge method PURGE acl CONNECT method CONNECT acl authenticated_users proxy_auth REQUIRED http_access allow purge localhost http_access deny purge # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports # # We strongly recommend the following be uncommented to protect innocent # web applications running on the proxy server who think the only # one who can access services on "localhost" is a local user #http_access deny to_localhost # # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed #acl our_networks src 192.168.1.0/24 192.168.2.0/24 #http_access allow our_network http_access allow localhost http_access allow localnet authenticated_users # And finally deny all other access to this proxy http_access deny all 2007/03/13 21:38:34| authBasicConfigured: returning configured 2007/03/13 21:38:34| helperOpenServers: Starting 5 'ncsa_auth' processes 2007/03/13 21:38:35| User-Agent logging is disabled. 2007/03/13 21:38:35| Referer logging is disabled. 2007/03/13 21:38:35| Unlinkd pipe opened on FD 19 2007/03/13 21:38:35| Swap maxSize 102400 KB, estimated 7876 objects 2007/03/13 21:38:35| Target number of buckets: 393 2007/03/13 21:38:35| Using 8192 Store buckets 2007/03/13 21:38:35| Max Mem size: 8192 KB 2007/03/13 21:38:35| Max Swap size: 102400 KB 2007/03/13 21:38:35| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2007/03/13 21:38:35| Rebuilding storage in /var/spool/squid (CLEAN) 2007/03/13 21:38:35| Using Least Load store dir selection 2007/03/13 21:38:35| Set Current Directory to /var/spool/squid 2007/03/13 21:38:35| Loaded Icons. 2007/03/13 21:38:35| Accepting HTTP connections at 192.168.128.1, port 3128, FD 21. 2007/03/13 21:38:35| Accepting ICP messages at 0.0.0.0, port 3130, FD 22. 2007/03/13 21:38:35| HTCP Disabled. 2007/03/13 21:38:35| WCCP Disabled. 2007/03/13 21:38:35| Ready to serve requests. 2007/03/13 21:38:35| Done reading /var/spool/squid swaplog (0 entries) 2007/03/13 21:38:35| Finished rebuilding storage from disk. 2007/03/13 21:38:35| 0 Entries scanned 2007/03/13 21:38:35| 0 Invalid entries. 2007/03/13 21:38:35| 0 With invalid flags. 2007/03/13 21:38:35| 0 Objects loaded. 2007/03/13 21:38:35| 0 Objects expired. 2007/03/13 21:38:35| 0 Objects cancelled. 2007/03/13 21:38:35| 0 Duplicate URLs purged. 2007/03/13 21:38:35| 0 Swapfile clashes avoided. 2007/03/13 21:38:35| Took 0.4 seconds ( 0.0 objects/sec). 2007/03/13 21:38:35| Beginning Validation Procedure 2007/03/13 21:38:35| Completed Validation Procedure 2007/03/13 21:38:35| Validated 0 Entries 2007/03/13 21:38:35| store_swap_size = 0k ... 2007/03/13 21:38:48| authenticateValidateUser: Validating Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateValidateUser: Validated Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateValidateUser: Validating Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateValidateUser: Validated Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| User not authenticated or credentials need rechecking. 2007/03/13 21:38:48| authenticateValidateUser: Validating Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateValidateUser: Validated Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| User not authenticated or credentials need rechecking. 2007/03/13 21:38:48| aclMatchAcl: returning 0 sending credentials to helper. 2007/03/13 21:38:48| aclMatchAclList: no match, returning 0 2007/03/13 21:38:48| aclCheck: checking password via authenticator 2007/03/13 21:38:48| authenticateValidateUser: Validating Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateValidateUser: Validated Auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateStart: auth_user_request '0x844d1e8' 2007/03/13 21:38:48| authenticateStart: 'www:123' 2007/03/13 21:38:48| authenticateAuthUserRequestLock auth_user request '0x844d1e8'. 2007/03/13 21:38:48| authenticateAuthUserRequestLock auth_user request '0x844d1e8' now at '2'. 2007/03/13 21:38:48| helperDispatch: Request sent to basicauthenticator #1, 8 bytes 2007/03/13 21:38:48| helperSubmit: www 123 после этой строчки ничего не происходит, если нажать стоп в браузере, добавляются еще 2 строки: 2007/03/13 21:45:50| authenticateAuthUserRequestUnlock auth_user request '0x844d1e8'. 2007/03/13 21:45:50| authenticateAuthUserRequestUnlock auth_user_request '0x844d1e8' now at '1'.
Ответ на:
комментарий
от siniy-p
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.