Squid - ncsa_auth strange problem with username/password

Author

ncsa_auth strange problem with username/password

khal1424

2004-08-14, 5:45 pm

Greetings

I use squid 2.5 with basic_auth (ncsa_auth), I found a strange problem
with accessing the server, for examaple, if the username is xyz and
the password is 123xyz333 then the anyone can access the server if
entered the userid specified above along with part of the password
(say 123xyz)!! the server doesnt check for the excact password.

any idea?

TIA.

Muthukumar_K

2004-10-12, 5:10 pm

I have tested NCSA authentication for this problem. But it is not progressing as you have suggested there.

You can verify that as,

htpasswd .... passwdfile xyz
New passwd: 123xyz333
Retype passwd: 123xyz333

Command line testing as,

path to squid/libexec/ncsa_auth ..passwdfile
xyz 123xyz333
OK
xyx 123xyz
ERR

It will give an important way to get to know success / failure there. If you find problem with examples post it.

HTH.

REgards
Muthukumar.

Visolve Squid Support Team.
url: http://squid.visolve.com/squid/index.htm
mail: support@visolve.com