Greetings

I use squid 2.5 with basic_auth (ncsa_auth), I found a strange problem
with accessing the server, for examaple, if the username is xyz and
the password is 123xyz333 then the anyone can access the server if
entered the userid specified above along with part of the password
(say 123xyz)!!  the server doesnt check for the excact password.

any idea?

TIA.

[ Post a follow-up to this message ]

I have tested NCSA authentication for this problem. But it is not progressin
g as you have suggested there.

You can verify that as,

 htpasswd .... passwdfile xyz
 New passwd: 123xyz333
 Retype passwd: 123xyz333

 Command line testing as,

  path to squid/libexec/ncsa_auth ..passwdfile 
  xyz 123xyz333
  OK
  xyx 123xyz
  ERR

  It will give an important way to get to know success / failure there. If y
ou find problem with examples post it.

HTH.

REgards
Muthukumar.

Visolve Squid Support Team.
url: http://squid.visolve.com/squid/index.htm
mail: support@visolve.com

[ Post a follow-up to this message ]