paul cooper wrote:
a follow-on ive turned up debugging to debug_options ALL,1 33,2 28,9 squid.conf has hepworth andrew # cat -n /etc/squid/squid.conf |grep ip_user 405 external_acl_type ip_user_helper %SRC %LOGIN /usr/libexec/squid/ip_user_check -f /etc/squid/ip_user.conf hepworth andrew # hepworth andrew # cat -n /etc/squid/squid.conf |grep andr 563 acl andrew ext_user andrew 642 http_access allow andrew hepworth andrew # Ive tried in ip_user.conf (LAN IP address for this machine is 192.168.0.200 ) 192.168.0.0/24 andrew 127.0.0.1 andrew the relevant bit ( i think) of the output 2008/03/18 17:26:29| aclMatchAcl: checking 'acl CONNECT method CONNECT' 2008/03/18 17:26:29| aclMatchAclList: no match, returning 0 2008/03/18 17:26:29| aclCheck: checking 'http_access allow andrew' 2008/03/18 17:26:29| aclMatchAclList: checking andrew 2008/03/18 17:26:29| aclMatchAcl: checking 'acl andrew ext_user andrew' 2008/03/18 17:26:29| aclMatchAclList: no match, returning 0 2008/03/18 17:26:29| aclCheck: checking 'http_access allow our_networks' 2008/03/18 17:26:29| aclMatchAclList: checking our_networks 2008/03/18 17:26:29| aclMatchAcl: checking 'acl our_networks src 192.168.0.0/24 ' 2008/03/18 17:26:29| aclMatchIp: '127.0.0.1' NOT found 2008/03/18 17:26:29| aclMatchAclList: no match, returning 0 2008/03/18 17:26:29| aclCheck: checking 'http_access deny all' 2008/03/18 17:26:29| aclMatchAclList: checking all 2008/03/18 17:26:29| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0' 2008/03/18 17:26:29| aclMatchIp: '127.0.0.1' found 2008/03/18 17:26:29| aclMatchAclList: returning 1 so the username authentication seems not to be getting through .
Any hint as to which of the many Squid releases available that you are actually seeing this in?
Amos -- Please use Squid 2.6STABLE17+ or 3.0STABLE1+ There are serious security advisories out on all earlier releases.
