URL: https://www.opennet.me/cgi-bin/openforum/vsluhboard.cgi
Форум: vsluhforumID12
Нить номер: 2979
[ Назад ]

Исходное сообщение
"407 ;("
Отправлено liquid , 03-Мрт-05 10:28

Доброго времени суток.
Пришла необходимость поставить сквиду с аутентификацией.
все вроде собрал, завел пользователей... толку - ноль... выскакивает запрос авторизации.. ввожу логин с паролем ... отказ...
407 ошибка
access.log пишет tcp denied 407
после 5 попыток ввести пароль в messages появляется строка что мол много процессов аутентификации (auth_param basic children 5) ...
конфиг сквида ниже
http_port 3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/.passwd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp:         &n... 1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern .               0       20%     4320
acl parol proxy_auth REQUIRED
acl user1 src xx.xx.xx.xx/255.255.255.255
acl user2 src xx.xx.xx.xx/255.255.255.255
acl ya src xx.xx.xx.xx/255.255.255.255
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl MUD port 9000               # MUD
acl CONNECT method CONNECT
acl squid_block_badlang     url_regex -i "/etc/squid/squidblock/badlang.block.txt"
acl squid_unblock_badlang   url_regex -i "/etc/squid/squidblock/badlang.unblock.txt"
acl squid_block_entertain   url_regex -i "/etc/squid/squidblock/entertain.block.txt"
acl squid_unblock_entertain url_regex -i "/etc/squid/squidblock/entertain.unblock.txt"
acl squid_block_games       url_regex -i "/etc/squid/squidblock/games.block.txt"
acl squid_unblock_games     url_regex -i "/etc/squid/squidblock/games.unblock.txt"
acl squid_block_pirate      url_regex -i "/etc/squid/squidblock/pirate.block.txt"
acl squid_block_mp3         url_regex -i "/etc/squid/squidblock/mp3.block.txt"
acl squid_unblock_pirate    url_regex -i "/etc/squid/squidblock/pirate.unblock.txt"
acl squid_block_porn        url_regex -i "/etc/squid/squidblock/porn.block.txt pron.block.txt"
acl squid_unblock_porn      url_regex -i "/etc/squid/squidblock/porn.unblock.txt"
http_access deny squid_block_badlang !squid_unblock_badlang
http_access deny squid_block_entertain !squid_unblock_entertain
http_access deny squid_block_games !squid_unblock_games
http_access deny squid_block_pirate !squid_unblock_pirate
http_access deny squid_block_mp3
http_access deny squid_block_porn !squid_unblock_porn
http_access allow manager localhost
http_access deny manager
http_access allow MUD
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow parol user1 user2 ya
http_access deny all
http_reply_access allow all
icp_access allow all

Содержание

407 ;(,liquid, 12:54 , 03-Мрт-05
407 ;(,mig, 14:48 , 05-Мрт-05

Сообщения в этом обсуждении

"407 ;("
Отправлено liquid , 03-Мрт-05 12:54

а вот что мне написал cach.log

2005/03/03 12:41:19| The reply for GET http://www.yandex.ru/yandsearch?rpt=rad&text= is ALLOWED, because it matched 'all'
2005/03/03 12:41:19| WARNING: basicauthenticator #2 (FD 7) exited

"407 ;("
Отправлено mig , 05-Мрт-05 14:48

>Доброго времени суток.
>
>Пришла необходимость поставить сквиду с аутентификацией.
>
>все вроде собрал, завел пользователей... толку - ноль... выскакивает запрос авторизации.. ввожу
>логин с паролем ... отказ...
>407 ошибка
>
>access.log пишет tcp denied 407
>
>после 5 попыток ввести пароль в messages появляется строка что мол много
>процессов аутентификации (auth_param basic children 5) ...
>
>конфиг сквида ниже
>
>http_port 3128
>hierarchy_stoplist cgi-bin ?
>acl QUERY urlpath_regex cgi-bin \?
>no_cache deny QUERY
>auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/.passwd
>auth_param basic children 5
>auth_param basic realm Squid proxy-caching web server
>auth_param basic credentialsttl 2 hours
>refresh_pattern ^ftp:         &n...
>1440    20%     10080
>refresh_pattern ^gopher:        1440
> 0%      1440
>refresh_pattern .
>    0
>20%     4320
>acl parol proxy_auth REQUIRED
>acl user1 src xx.xx.xx.xx/255.255.255.255
>acl user2 src xx.xx.xx.xx/255.255.255.255
>acl ya src xx.xx.xx.xx/255.255.255.255
>acl all src 0.0.0.0/0.0.0.0
>acl manager proto cache_object
>acl localhost src 127.0.0.1/255.255.255.255
>acl to_localhost dst 127.0.0.0/8
>acl SSL_ports port 443 563
>acl Safe_ports port 80
> # http
>acl Safe_ports port 21
> # ftp
>acl Safe_ports port 443 563     # https, snews
>
>acl Safe_ports port 70
> # gopher
>acl Safe_ports port 210
># wais
>acl Safe_ports port 1025-65535  # unregistered ports
>acl Safe_ports port 280
># http-mgmt
>acl Safe_ports port 488
># gss-http
>acl Safe_ports port 591
># filemaker
>acl Safe_ports port 777
># multiling http
>acl MUD port 9000
>      # MUD
>acl CONNECT method CONNECT
>acl squid_block_badlang     url_regex -i "/etc/squid/squidblock/badlang.block.txt"
>acl squid_unblock_badlang   url_regex -i "/etc/squid/squidblock/badlang.unblock.txt"
>acl squid_block_entertain   url_regex -i "/etc/squid/squidblock/entertain.block.txt"
>acl squid_unblock_entertain url_regex -i "/etc/squid/squidblock/entertain.unblock.txt"
>acl squid_block_games       url_regex -i "/etc/squid/squidblock/games.block.txt"
>acl squid_unblock_games     url_regex -i "/etc/squid/squidblock/games.unblock.txt"
>acl squid_block_pirate      url_regex -i "/etc/squid/squidblock/pirate.block.txt"
>acl squid_block_mp3         url_regex -i
>"/etc/squid/squidblock/mp3.block.txt"
>acl squid_unblock_pirate    url_regex -i "/etc/squid/squidblock/pirate.unblock.txt"
>acl squid_block_porn        url_regex -i "/etc/squid/squidblock/porn.block.txt
>pron.block.txt"
>acl squid_unblock_porn      url_regex -i "/etc/squid/squidblock/porn.unblock.txt"
>http_access deny squid_block_badlang !squid_unblock_badlang
>http_access deny squid_block_entertain !squid_unblock_entertain
>http_access deny squid_block_games !squid_unblock_games
>http_access deny squid_block_pirate !squid_unblock_pirate
>http_access deny squid_block_mp3
>http_access deny squid_block_porn !squid_unblock_porn
>http_access allow manager localhost
>http_access deny manager
>http_access allow MUD
>http_access deny !Safe_ports
>http_access deny CONNECT !SSL_ports
>http_access allow parol user1 user2 ya
>http_access deny all
>http_reply_access allow all
>icp_access allow all

Попробуй так:
<--->
acl user1 src xx.xx.xx.xx/255.255.255.255
acl user2 src xx.xx.xx.xx/255.255.255.255
acl ya src xx.xx.xx.xx/255.255.255.255
acl parol proxy_auth user1 user2 ya
<--->
http_access allow parol user1 user2 ya