Amos Jeffries wrote:
Ian Barton wrote:
I have set up a Squid proxy on my Linode for use when I am away from
home and need to use a proxy. In order to stop anyone being able to
use it I have set up authorization.
If I use basic authorization it all works correctly. I get prompted to
enter my user name and password and I can start browsing. However, I
want to set up digest authentication, so my password isn't transmitted
in plain text.
When I enable digest authorization, I get prompted to enter my
credentials, which are accepted. The browser then keeps contacting the
site, but nothing is displayed. In my squid logs I see:
1246527762.271 15 217.146.125.41 TCP_DENIED/407 1796 GET
http://thetimes.co.uk/ ian NONE/- text/html
1246527762.894 19 217.146.125.41 TCP_DENIED/407 1796 GET
http://thetimes.co.uk/ ian NONE/- text/html
1246527763.553 21 217.146.125.41 TCP_DENIED/407 1796 GET
http://thetimes.co.uk/ ian NONE/- text/html
Here is the relevant bit of squid.conf:
auth_param digest program /usr/lib/squid/digest_pw_auth -c
/etc/squid/htdigest.squid
auth_param digest children 5
auth_param digest realm "Squid Proxy Server"
auth_param digest nonce_garbage_interval 5 minutes
auth_param digest nonce_max_duration 30 minutes
auth_param digest nonce_max_count 50
acl digest_users proxy_auth REQUIRED
http_access allow digest_users
I am using the version of Squid that comes with Debian Lenny.
There are two that come with Lenny.
"squid -v" or "dpkg --list | grep squid" will say which.
I suspect there is a problem either with the browser support or the
digest helper.
I am using:
ii squid 2.7.STABLE3-4.1 Internet
object cache (WWW proxy cache)
My browser is Firefox 3.0.11.
Ian.
