1. 服务器/VPS/主机用户Telegram电报群: https://t.me/openos
    黑群晖 Synology Telegram电报群: https://t.me/nasfan
    排除公告

squid设置'带-丽'加密407

本帖由 Qiang01092025-02-14 发布。版面名称:Linux

  1. Qiang0109

    Qiang0109 New Member

    注册:
    2025-02-12
    帖子:
    6
    Squid Cache: Version 3.5.12

    /etc/squid/squid.conf配置
    auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd
    auth_param basic children 5
    auth_param basic realm "Squid Proxy"
    auth_param basic credentialsttl 2 hours

    acl authenticated proxy_auth REQUIRED
    http_access allow authenticated
    http_access deny all

    http_port 3128
    coredump_dir /var/spool/squid

    sudo -u proxy /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd
    可以正确响应ok

    cache日志存在
    kid1| helperOpenServers: Starting 0/5 'basic_ncsa_auth' processes
    kid1| helperOpenServers: No 'basic_ncsa_auth' processes needed.
    没法启用basic_ncsa_auth进程

    sudo ls -l /usr/lib/squid/basic_ncsa_auth
    -rwxr-xr-x 1 proxy proxy 18392 Sep 17 2020 /usr/lib/squid/basic_ncsa_auth
    cat /etc/squid/squid.conf |grep basic_ncsa_auth
    auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwd
    ldd /usr/lib/squid/basic_ncsa_auth
    linux-vdso.so.1 => (0x00007ffd53923000)
    libnettle.so.6 => /usr/lib/x86_64-linux-gnu/libnettle.so.6 (0x00007f79ea864000)
    libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1 (0x00007f79ea62c000)
    libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f79ea2aa000)
    libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f79e9fa1000)
    libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f79e9bd8000)
    /lib64/ld-linux-x86-64.so.2 (0x00007f79eaca1000)
    libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f79e99c2000)


    测试响应
    curl -I -x http://127.0.0.1:3128 http://www.baidu.com/ -u testuser
    Enter host password for user 'testuser':
    HTTP/1.1 407 Proxy Authentication Required
    Server: squid/3.5.12
    Mime-Version: 1.0
    Date: Fri, 14 Feb 2025 09:42:01 GMT
    Content-Type: text/html;charset=utf-8
    Content-Length: 3624
    X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
    Vary: Accept-Language
    Content-Language: en
    Proxy-Authenticate: Basic realm="Squid proxy-caching web server"
    可能是什么问题会导致http'带-丽'测试响应407 X-Squid-Error: ERR_CACHE_ACCESS_DENIE
     
  2. Qiang0109

    Qiang0109 New Member

    注册:
    2025-02-12
    帖子:
    6
    已解决 '带-丽'认证需要使用
    --proxy-user头部