squid3_ncsa_auth8

Usage

Overview

ncsa_auth allows Squid to read and authenticate user and password information from an NCSA/Apache httpd-style password file when using basic HTTP authentication.

The only parameter is the password file. It must have permissions to be read by the user that Squid is running as (cache_effective_user in squid.conf).

This password file can be manipulated using htpasswd.

* MD5 - with optional salt and magic strings * DES - for passwords 8 characters or less in length

Options

Only specify the password file name.

Examples

ncsa_auth /etc/squid/squid.pass

Security

ncsa_auth must have access to the password file to be executed.

Known issues

DES functionality (used by htpasswd by default) silently truncates passwords to 8 characters. Allowing login with password values shorter than the one desired. This authenticator will reject login with long passwords when using DES.