vaibhav samant wrote:
Hello,
I am using squid v 2.5.STABLE8 (recompiled with x-forwarded-for patch) along wi th dansguardian v 2.8.0.3 on a FC2 box. Iptables dnat rules make sure that all port 80 and port 3128 requests are sent to port 8080.
This is not a solution to the problem, but you could try chucking iptables, and go for the transparent proxy option in squid.
When I configure squid to enable access based on proxy_auth using /usr/lib/squi d/pam_auth, I always get access denied... with the following line in the cache.log : 2005/08/25 11:51:06| aclAuthenticated: authentication not applicable on acceler ated requests.
Funny thing is -- if the client's browser settings are changed to use Proxy ser ver on port 3128 instead of "automatically detect settings", then the browser pops up for username/password and accepts correct passwords to work just fine.
But I was wanting to get this done when the browser hits on port 80 and not por t 3128.
Even when I try without Accel mode, I get access denied from squid, with the on ly difference being that instead of saying that the denied page was - lets say - "yahoo.com" -- it will say denied page was -- "/"
I googled a bit and found that squid ver 3 (still under DEVEL) has an option to rebuild with "--enable-auth-on-accel" which will probably solve this problem.
But i dont want to use v3 as it is still under DEVEL. I am now wondering what can be done about this ..... can someone help?
Thanx in advance Vai