Ive volunteered to setup one machine with 4 logins + content
filtering/time based ACL  for the 2 children  to replace ( and improve
on )  my sisters'  dying winXP machine.
I want to use basic authentication  ( less work for me and i think) and
none are particularly computer literate to mess  around at  all ( well
-yet)

OS = gentoo linux

ive compiled squid Squid  Version 2.6.STABLE18  with configure options: 
'--enable-basic-auth-helpers=getpwnam'

bits of my squid conf

hepworth ~ # grep  ^[A-Za-z] /usr/local/squid/etc/squid.conf
auth_param basic program /usr/local/squid/libexec/getpwname_auth /etc/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl CONNECT method CONNECT
acl passwd proxy_auth
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow  passwd
http_access deny all
icp_access allow all
http_port 3128
logformat squid  %tl  %Ss/%03Hs  %rm %ru %ul   %mt
access_log /var/log/squid/access.log squid

but the proxy wont let me through  when i enter he username and  unix
login password.

hepworth ~ # tail -n 3 /var/log/squid/access.log
 16/Mar/2008:12:08:44 +0000  TCP_DENIED/407  GET
http://en-us.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
andrew   text/html
 16/Mar/2008:12:08:57 +0000  TCP_DENIED/407  GET
http://en-us.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
andrew   text/html
 16/Mar/2008:12:09:00 +0000  TCP_DENIED/407  GET
http://en-us.start2.mozilla.com/favicon.ico -   text/html
hepworth ~ #





Reply via email to