I am using Squid 2.7 on a Debian box for several years without any problem. Without changing the configuration (only doing the necessary system updates), the user authentication is not longer working as expected. I activated two authentication schemes (squid_kerb_auth and pam_auth). While Kerberos authentication is working fine on our Linux boxes, PAM authentication sometimes failes. Here are some logfile entries from the cache.log file:
*** BEGIN *** 2013/11/01 08:20:31| aclCheck: checking 'http_access allow password' 2013/11/01 08:20:31| aclMatchAclList: checking password 2013/11/01 08:20:31| aclMatchAcl: checking 'acl password proxy_auth REQUIRED' 2013/11/01 08:20:31| authenticateValidateUser: Validating Auth_user request '(nil)'. 2013/11/01 08:20:31| authenticateValidateUser: Auth_user_request was NULL! 2013/11/01 08:20:31| authenticateAuthenticate: broken auth or no proxy_auth header. Requesting auth header. 2013/11/01 08:20:31| aclAuthenticated: returning 0 sending authentication challenge. 2013/11/01 08:20:31| aclMatchAclList: no match, returning 0 2013/11/01 08:20:31| aclCheck: requiring Proxy Auth header. 2013/11/01 08:20:31| aclCheck: match found, returning 2 2013/11/01 08:20:31| cbdataUnlock: 0xba583c00 2013/11/01 08:20:31| aclCheckCallback: answer=2 2013/11/01 08:20:31| cbdataValid: 0xb5002098 2013/11/01 08:20:31| The request GET http://www.spiegel.de/ is DENIED, because it matched 'password' 2013/11/01 08:20:31| Access Denied: http://www.spiegel.de/ 2013/11/01 08:20:31| AclMatchedName = password 2013/11/01 08:20:31| Proxy Auth Message = <null> *** END *** If I understand well, no authentication data is delivered and so the browser pops up an authentication dialogue. If the user enters his data, the dialogue appears again and again without showing the requested web page. If one clicks on the cancel button, the requested web page appears sometimes. Let's take my own MacBook as example: the proxy AND the authentication data are stored in the network configuration settings. So, Safari has never to ask for this data, but since some days, I am not able to see any web page. Most of our Windows boxes using pam_auth are working fine; the problem appears only rarely. Can you help, please? Thanks in advance! Juergen