LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-27-2003, 09:11 AM   #1
thijsvb
LQ Newbie
 
Registered: Oct 2003
Posts: 1

Rep: Reputation: 0
Squid NCSA_Auth problem


I have a problem with NCSA authentication and Squid proxy.

When I setup ncsa to use my default passwd (or shadow) file the authenticationscreen pops up but it doesn't give my clients (all Win XP) access. I think this has something to do with the way Win XP sends it's authentication, but I'm not sure.

Please let me know if this is a known problem. I have been searching forum's for a month now but I wasn't able to find anything.

Thanks


 
Old 10-29-2003, 07:38 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596Reputation: 3596
When I setup ncsa to use my default passwd (or shadow) file
If I understand what you're doing here, I would think it's bad to use the systems' shadow file in the first place. A comparable example would be with using FTP: users that have no need for a local account should use a "virtual" account and a separate passwd file.
I've read Squid caches credentials in memory in cleartext, which means that if someone is able to board the proxy itself and read memory there is the possibility he would be able to extract your pass. If you've done your auth tests as root, ah, well...

but it doesn't give my clients (all Win XP) access. I think this has something to do with the way Win XP sends it's authentication
I think you should set up "proper" NCSA/Apache style passwd auth, then try again and if it still doesn't work look at the logs and post any errors and your Squid conf.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
problem in squid muhaur Linux - Enterprise 1 08-15-2005 12:46 AM
squid problem hariiyer Linux - Networking 6 02-14-2005 06:27 AM
ncsa_auth gubak Linux - Networking 2 08-13-2004 02:06 PM
Squid Authentication problem using ncsa_auth alexjordan02 Linux - Software 0 01-28-2004 09:53 PM
Squid-ncsa_auth jai_ts Linux - Software 1 10-02-2003 09:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:17 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration