basic_ncsa_auth8

Usage

Overview

basic_ncsa_auth allows Squid to read and authenticate user and password information from an NCSA/Apache httpd-style password file when using basic HTTP authentication.

This password file can be manipulated using htpasswd.

This authenticator accepts:
* Blowfish - for passwords 72 characters or less in length.
* SHA256 - with salting and magic strings.
* SHA512 - with salting and magic strings.
* MD5 - with optional salt and magic strings.
* DES - for passwords 8 characters or less in length. NOTE: Blowfish and SHA algorithms require system-specific support.

Options

The only parameter is the password file. It must have permissions to be read by the user that Squid is running as.

Configuration

basic_ncsa_auth must have access to the password file to be executed.

Known issues

DES functionality (used by htpasswd by default) silently truncates passwords to 8 characters. Allowing login with password values shorter than the one desired. This authenticator will reject login with long passwords when using DES.

Questions

Questions on the usage of this program can be sent to the Squid Users mailing list <[email protected]>