ncsa_auth is not meant to be used against the shadow file, it is meant
to be used against a separate proxy password file created by using the
htpasswd command or a similar tool (note: some versions of htpasswd
requires the -d option to be compatible with ncsa_auth. ncsa_auth
expects passwords in "crypt" format)
Most likely the user Squid is running as does not have the required
privileges to read /etc/shadow. If it could then the security of your
system is seriously compromised.
Regards
Henrik Nordström
Squid Hacker
Winston Gutkowski wrote:
>
> Hi,
>
> Thanks to Henryk I've managed to compile NCSA and get ncsa_auth loaded in
> /usr/bin.
> I'm running it against the /etc/shadow file and I've tested it on the
> command line with my Unix username and password. It works fine. However,
> when I go to the client machine (Windows 98), IE 6 shows me a login screen
> (so, presumably it's picking up the fact that an authentication is
> required), but it doesn't accept the same username and password that works
> on the squid box. Netscape actually tells me that the Proxy authentication
> failed. I've tried all combinations of upper and lower case I can think of.
>
> Anybody any ideas? Alternatively, are there any log files/debugging aids I
> can check to find out what is going on?
>
> Winston
>
> ------------------------------------------------------------------------
> Name: winmail.dat
> winmail.dat Type: application/ms-tnef
> Encoding: base64
Received on Tue Oct 16 2001 - 15:22:29 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:47 MST