RE: [squid-users] Still trying to get NCSA working

Thanks very much Henrik, it was permissions; silly of me not to have thought
of it. NCSA does work with a shadow-type file but, as you say, probably
better not. I'm also interested in testing the other authentication modules
(PAM, Samba, MSNT etc.). Does htpasswd generate user/password pairs
compatible with these modules?

Winston

-----Original Message-----
From: hno@hem.passagen.se [mailto:hno@hem.passagen.se]On Behalf Of
Henrik Nordstrom
Sent: Tuesday, October 16, 2001 2:19 PM
To: Winston Gutkowski
Cc: Squid-Users
Subject: Re: [squid-users] Still trying to get NCSA working

ncsa_auth is not meant to be used against the shadow file, it is meant
to be used against a separate proxy password file created by using the
htpasswd command or a similar tool (note: some versions of htpasswd
requires the -d option to be compatible with ncsa_auth. ncsa_auth
expects passwords in "crypt" format)

Most likely the user Squid is running as does not have the required
privileges to read /etc/shadow. If it could then the security of your
system is seriously compromised.

Regards
Henrik Nordström
Squid Hacker

Winston Gutkowski wrote:
>
> Hi,
>
> Thanks to Henryk I've managed to compile NCSA and get ncsa_auth loaded in
> /usr/bin.
> I'm running it against the /etc/shadow file and I've tested it on the
> command line with my Unix username and password. It works fine. However,
> when I go to the client machine (Windows 98), IE 6 shows me a login screen
> (so, presumably it's picking up the fact that an authentication is
> required), but it doesn't accept the same username and password that works
> on the squid box. Netscape actually tells me that the Proxy authentication
> failed. I've tried all combinations of upper and lower case I can think
of.
>
> Anybody any ideas? Alternatively, are there any log files/debugging aids I
> can check to find out what is going on?
>
> Winston
>
> ------------------------------------------------------------------------
> Name: winmail.dat
> winmail.dat Type: application/ms-tnef
> Encoding: base64
Received on Tue Oct 16 2001 - 15:58:49 MDT