Comments on: Howto: Squid proxy authentication using ncsa_auth helper

By: LtPitt

LtPitt — Thu, 15 Dec 2011 10:20:13 +0000

What a post!

God bless you.

By: Juan Garcia

Juan Garcia — Fri, 14 Oct 2011 16:56:08 +0000

Followed the example and got the proxy authentication to work successfully…. This is a very nicely written example of how to get started. The only thing I had to do extra, was to install a package that would allow me to run the “htpasswd” command.

Thanks a bunch,

Juan

By: RODEL R. BANEZ

RODEL R. BANEZ — Thu, 18 Aug 2011 00:38:14 +0000

ACL Name
Max Logon IPs per user
Strictly Enforced
remember to set Authenticate IP Cache to > 0 in “Authentication Programs Module”

By: RODEL R. BANEZ

RODEL R. BANEZ — Sat, 06 Aug 2011 10:52:02 +0000

The info was very interesting but the problem is that. one user account can authenticate multiple times. You should also show us how to limit a user authentication because this is the most important in authentication program is to limit the account login. and how to auto ban the account if its use multiple times in different pc. I hope you can give us a code in squid

By: kebo

kebo — Wed, 22 Jun 2011 05:59:33 +0000

Stopping squid: [FAILED]
Starting squid: [FAILED]
for that?

By: Jarkko

Jarkko — Thu, 24 Feb 2011 07:30:07 +0000

Anyone who has the problem that the authentication window pops up but the authentication fails all the time, try this: in squid.conf set auth_param basic casesensitive on

I dont really know why but it worked for me. I spent many hours until I accidentally found this out so I hope this helps somebody.

By: Ankalagon

Ankalagon — Sun, 05 Dec 2010 20:06:08 +0000

Great,

works fine,

thank you very much!

By: x__d

x__d — Mon, 29 Nov 2010 11:24:03 +0000

how do i use this htpasswd command

on win[7]x64

i tried but it does not recognise the command

:]] some help with example

By: kartik

kartik — Wed, 27 Oct 2010 19:32:42 +0000

I am getting tcp_denied/407 error . What should I do ?

By: Mohan

Mohan — Thu, 26 Aug 2010 07:20:56 +0000

My configuration is
# be allowed
acl our_networks src 192.168.1.0/24 192.168.2.0/24
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic realm Squid proxy-caching web server
acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users
http_access allow our_networks

I am getting this error
Aug 26 23:12:49 centos1 squid[4040]: The basicauthenticator helpers are crashing too rapidly, need help!
Aug 26 23:12:49 centos1 squid[4038]: Squid Parent: child process 4040 exited due to signal 6
to signal 6
Aug 26 23:12:55 centos1 squid[4038]: Squid Parent: child process 4059 started

Guys any body please update on this issue.

By: jason gumarang

jason gumarang — Tue, 06 Jul 2010 02:30:24 +0000

Guys..if you cant get the authorization to come out, please try this.

acl ncsa_users proxy_auth REQUIRED (Add this to the bottom of the ACL section of squid.conf)

http_access allow ncsa_users (Add this at the top of the http_access section of squid.conf)

e.g.
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl ncsa_users proxy_auth REQUIRED

#Recommended minimum configuration:
#
# Only allow cachemgr access from localhost
http_access allow ncsa_users
http_access allow manager localhost
http_access allow our_networks
http_access deny manager

hope i solve your problems

By: Mande U.A.

Mande U.A. — Wed, 23 Jun 2010 11:37:50 +0000

I have done the steps as you have given. But it is saying that ncsa_auth no such file or directory. pls guide me

UAMANDE

By: Kamran

Kamran — Thu, 27 May 2010 12:24:10 +0000

nice artical but please any guide me how can I encrypt the clear text password user getting it with sanffirs.

By: rey

rey — Mon, 10 May 2010 19:42:02 +0000

hi I just make the all tutorial and when make a request the browser ask for user:pass but when I type in the user and pass it don’t allow access,
an important thing is that when I add the first user asuin htpasswd /etc/squid/passwd user1 it returns saying that must use -c then I make

htpasswd -c /etc/squid/passwd user1 and it work it add the user, but after that it don’t ask for a password so this steep don’t show:
New password:
Re-type new password:
Adding password for user user1

instead it create the user and asing a ramdom password, then I edit the file /etc/squid/passwd and I see the user1:5T6uud*9?h so I assume that that’s the username and password, but it don’t work

this is my configuration:

acl internal_network src 190.1.1.0-190.1.1.255
http_access allow internal_network

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

acl ncsa_users proxy_auth REQUIRED
http_access allow ncsa_users

By: wyhteagle

wyhteagle — Fri, 07 May 2010 20:04:43 +0000

Thanks for the help everything is running awesome!!!

By: captainoi1

captainoi1 — Tue, 04 May 2010 16:46:31 +0000

thank for the information,
it work.
To others who failed to get the authentication to work, maybe you should check your cache.log files.
At first, the authentication was not working on my server, however after checking on the cache.log file, i found out the password file name was wrong.

thank man

By: Andrius

Andrius — Wed, 24 Mar 2010 23:01:28 +0000

For those who got TCP_DENIED/407 error:

Trye username and password from lover case letter.

By: Ya mum

Ya mum — Wed, 17 Feb 2010 06:44:32 +0000

Nice! real great explination!

Greetz

By: PROXYGUY

PROXYGUY — Mon, 08 Feb 2010 07:16:39 +0000

yeah i got it running! but how can i restrict user account to use only once. because the username i created can use multiple times… like if the account is already in use.. the next user with the same account well be denied..

By: bezt

bezt — Mon, 01 Feb 2010 17:38:06 +0000

This only Authenticate user account. But what about ACL on different user/admin?
U can’t combine ACL with ncsa_auth, I mean what if user login with his password then change his IP to IP admin? .ncsa_auth can’t authenticate user account + IP machine + ACL user. Sorry for my bad English
Any Idea?