i've asked to be removed countless times. here's another message that i didn't want. it's really not that hard to remove somebody is it...
This is a forwarded message From: Bryan Dunn <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Friday, January 30, 2004, 11:41:09 AM Subject: [squid-users] cachemgr.cgi authentication issues (HELP!) ===8<==============Original message text=============== Hello fellow squidders! I have been searching through the faq's and mailing list archives for 3 days now with no success. I am trying to use cachemgr.cgi and I am getting "Cache Access Denied." I have tried changing around my acl's, and even when "all" has permission to access manager, I can't get it to work (from the localhost or anywhere else). After turning on debugging, I am seeing this message when I try to access cachemgr.cgi: 2004/01/30 11:33:46| authenticateValidateUser: Validating Auth_user request '(nil)'. 2004/01/30 11:33:46| authenticateValidateUser: Auth_user_request was NULL! 2004/01/30 11:33:46| The request GET http://localhost/cgi-bin/cachemgr.cgi is DENIED, because it matched 'auth_users' 2004/01/30 11:33:46| authenticateFixHeader: headertype:34 authuser:(nil) 2004/01/30 11:33:46| authenticateFixErrorHeader: Sending type:34 header: 'Basic realm="Squid proxy-caching web server"' I am using ldap to force my users to authenticate via a novell server, but I'm not sure if that is causing the issue. Can someone point me in the right direction? (Here's some snippets of my squid.conf) # Only allow cachemgr access from localhost http_access allow manager localhost http_access allow manager server http_access allow manager auth_users http_access deny manager http_access allow ourhosts # Deny requests to unknown ports http_access deny !Safe_ports # Deny CONNECT to other than SSL ports http_access deny CONNECT !SSL_ports # # We strongly recommend to uncomment the following to protect innocent # web applications running on the proxy server who think that the only # one who can access services on "localhost" is a local user #http_access deny to_localhost ---------------- acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl server src 204.126.212.253/255.255.255.255 acl all src 0.0.0.0/0.0.0.0 acl ourhosts src 204.126.0.0/255.255.0.0 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT acl auth_users proxy_auth REQUIRED -- Bryan Dunn Systems Administrator Aearo Company 508-764-5239 ===8<===========End of original message text=========== -- Best regards, mortbox mailto:[EMAIL PROTECTED]
