LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 02-06-2002, 07:21 AM   #1
mhs1973
LQ Newbie
 
Registered: Feb 2002
Distribution: Suse
Posts: 2

Rep: Reputation: 0
Question squid comes back with message 'access denied'


Hi,

Squid is running on Suse 7.2, works perfectly fine except for the following:

Website is access controlled with a windows logon (username, password, domian).

Squid only sends back (to the client) an 'access denied'.

on the squid (with netscape) the login window appears and you can log in.

How can I solve this?

Regards

Mark
 
Old 02-07-2002, 07:58 AM   #2
xanthium
Member
 
Registered: Apr 2001
Location: Bombay ( INDIA )
Distribution: RedHat 7.x
Posts: 218

Rep: Reputation: 30
Question Eh

Hi ,

let me be honest but i didnt really get what is it that ur trying to say !!!

is it that u dont get access denied with browsers other than netscape ? if so than its definately strange problem and one that i havent seen so far !!!

or is it that ur able to browse from the linux machine but not from other clients ? if so than its because the ACL allows ur own ip but not others ( its default !) ......

what's the exact situation ?

regards,
xanthium.



 
Old 02-07-2002, 10:29 AM   #3
mhs1973
LQ Newbie
 
Registered: Feb 2002
Distribution: Suse
Posts: 2

Original Poster
Rep: Reputation: 0
long version

Okay I am sorry I gave the readers digest version...

Now here is the full story

The Squid is running on Suse 7.2 with IP forwarding switched on.

This proxy has a VPN connection to another part of the companies network which is (unfortunately) only running w2k machines as webservers.

One of the webpages on one of those servers is protected by a login.
This login is provided by the w2k server. It asks in a separate window which is provided by a windows IIS5 server for username, password and domainname. It only accepts logins which have an account on this particular server.

For various reasons I do have to use a proxy to access this part of our company network.

If I use the computer the proxy is running on, then I do have access to this webpage after the login came up and I signed in. If I use a client computer which is 'behind' the proxy I get an access denied and there is no login that comes up.

What I see in the access.log is that the squid just confirms the login and therefor gets an access denied, which is sent to the client.

My questions are :
How can I configure Squid that way, that it provides that login window to the client machine in my network?
How can I configure the ACL that way that this happens?

Regards

Mark
 
Old 02-08-2002, 12:54 PM   #4
xanthium
Member
 
Registered: Apr 2001
Location: Bombay ( INDIA )
Distribution: RedHat 7.x
Posts: 218

Rep: Reputation: 30
hi ,

for squid to authemticate ur user u need authentication program ..... unfortunately its not supplied with squid ... u can use one that comes with apache i think its called ncsa_auth
or maybe u can use source code and compile one ..... making squid squid use this program is just a metter of configuring the squid.conf file.

okie .

as for ur win2k denial i again say something is wrong with ur ACL

hope this helps.

regards,
xanthium
 
Old 02-08-2002, 11:17 PM   #5
penseur2
Member
 
Registered: Jan 2002
Location: Chennai India
Distribution: Red Hat
Posts: 42

Rep: Reputation: 15
squid woes?

i assume that you are not asking your clients to authenticate themselves against squid but rathet one of your win2k servers needs authentication before it will serve up any webpages.
squid should'nt have a problem with that setup so my guess is that you may not have altered the default squid.conf file.

in your squid.conf go to the acl section and add the following

acl lan src 192.168.10.0/24

and immediately after that add

http_access allow lan


save the squid.conf file and restart squid.


Now try accessing the webserver from a client.

because you said your localhost is able to get the login dialog i'm sure this will solve your prob.


all the best.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid Access Denied Help eurekaguy4u Linux - Networking 21 04-29-2010 10:30 AM
Squid url port 81 access-denied error steve@korehicom.com Linux - Networking 0 10-13-2005 09:55 AM
squid access denied hariiyer Linux - Networking 2 10-30-2004 09:55 AM
Access Denied Using Squid Lucinda Linux - Software 8 06-10-2004 06:30 AM
Denied access by squid hagenuk Linux - General 1 10-07-2001 10:45 AM


All times are GMT -5. The time now is 11:19 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration