Re: [Security Firewall] problem with squid and pam password

[Ra�l D: Pitt� Palma]

Florin wrote:
"Ra�l D. Pitt� Palma" <[EMAIL PROTECTED]> writes:
 

Hi everybody!
I am having weird problems with squid in authenticated mode + pam password.
From time to time the users are unable to authenticate against the proxy.
I can access the proxy, it will ask for the password, but even if i
provided a good one, it wont recognize them.
I have dealing with it setting a cron job that will issue the following
command every 15 minutes:
        /sbin/service squid reload
an it works almost flawlessly.  Sometimes, it is necessary to reset the
user passsword via the console.
I have used squid on other paltforms, or on home made proxys, and it is
the first time i see something like this.
My MNF are patched up to date (as on oct. 8th , 2004).
Any ideas, someone have resolved this issue ?
RP
   

as default, the passwords expire after a short time on MNF 1 so maybe this
is your problem...
 

you mean the UNIX  passwords will expire soon?  or that squid will cache 
passwd for a small amoutn of time.
maybe i wasn't clear enough (english is not my 1st language), so here i 
go again:

1.  I create a user on Linux, set a passwd for him/her
2.  execute /sbin/service squid reload    , in order for squid to be 
aware of the new user
3.  the auth token (user/passwd) works perfectly a couple of times, and 
for a random time.
4.  after a random time, some users can not login using their passwd 
(who gets affected happens randomly)
5.  sometimes, just reloading squid will fix the problems , so users can 
authenticate against PAM
6.  sometimes, i have to reset their UNIX  passwd in order to 
authenticate against SQUID

of course, the burden in admin time is a PITA, because i have about 80 
users using squid.
thanks again for all your help.
I can modify the log level for squid/system/iptables  or anything else 
if someone want to peek at them.

thanks for your help.
RP
my 2 cts,
 

------------------------------------------------------------------------
____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________
 


____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________