ACL proxy_auth REQUIRED

zanatazan
(usa Debian)

Enviado em 16/08/2013 - 04:33h

Olá Pessoal não sei o que esta de errado, pois até antes de eu atualizar o debian 6 para o 7 funcionava porem tive que alterar algumas linhas porque apresentava mais telas de erro.
No entanto não consegui resolver esse problema logo abaixo

2013/08/16 04:30:01| Invalid Proxy Auth ACL 'acl autenticados proxy_auth REQUIRED' because no authentication schemes are fully configured.
FATAL: Bungled squid.conf line 47: acl autenticados proxy_auth REQUIRED
Squid Cache (Version 2.7.STABLE9): Terminated abnormally.

#########################################
############## TI - SAUDE ###############
#########################################

http_port 5005
visible_hostname http://host.zanata.net.br #Hostname
cache_mgr cpdsaude@estanciadepiraju.sp.gov.br

############ Conf Caches
cache_mem 1024 MB
maximum_object_size_in_memory 64 KB
maximum_object_size 2048 MB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 95
refresh_pattern ^ftp: 15 20% 2280
refresh_pattern ^gopher: 15 0% 2280
refresh_pattern . 15 20% 2280

############## Conf Logs
cache_access_log /var/log/squid/access.log
cache_store_log /var/log/squid/store.log
cache_log /var/squid/logs/cache.log
cache_dir ufs /var/spool/squid 20000 16 256

############## Conf ACLs
acl all src all
acl redelocal src 172.16.0.0/12
acl redelocal src 10.0.0.0/8
acl to_localhost dst 172.16.0.0-8.0.0.0/32
acl localhost src 127.0.0.1/32
acl Safe_ports port 80
#acl SSL_ports port port 443 563
acl Safe_ports port 21 # http
acl Safe_ports port 443 563 # ftp
acl Safe_ports port 70 # https, snews
acl Safe_ports port 210 # gopher
acl Safe_ports port 280 # wais
acl Safe_ports port 488 # http-mgmt
acl Safe_ports port 591 # gss-http
acl Safe_ports port 777 # filemaker
acl Safe_ports port 901 # multiling http
acl Safe_ports port 1025-65535 # swat
acl purge method PURGE # portas altas
acl CONNECT method CONNECT
acl manager proto cache_object
acl autenticados proxy_auth REQUIRED

########### Direitos de Acessos
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge

########### mysqlt_auth
auth_param basic program /usr/lib/squid/mysqlt_auth
auth_param basic realm TI-SAUDE

########### Autenticacao
acl acesso_full proxy_auth "/etc/squid/acessos/acesso_full"

########### Bloquear por palavras
acl bloquear_palavras url_regex -i "/etc/squid/bloqueio/bloquear_palavras"
acl bloquear_msn dstdomain "/etc/squid/bloqueio/bloquear_msn"
deny_info http://host.zanata.net.br/bloqueio bloquerar_palavras

########### Bloquar mensageiros
acl acesso_msn proxy_auth "/etc/squid/acessos/acesso_msn"
acl bloquear_orkut url_regex -i "/etc/squid/bloqueio/bloquear_orkut"
http_access allow acesso_msn bloquear_msn
http_access deny bloquear_msn
deny_info http://host.zanata.net.br/bloqueio bloquear_msn

########### Bloquear Sites de relacionamentos
acl acesso_orkut proxy_auth "/etc/squid/acessos/acesso_orkut"
acl bloquear_googletalk url_regex -i "/etc/squid/bloqueio/bloquear_googletalk"
http_access allow acesso_orkut bloquear_orkut
http_access deny bloquear_orkut
deny_info http://host.zanata.net.br/bloqueio bloquear_orkut

########### Bloquar google talk
acl acesso_googletalk proxy_auth "/etc/squid/acessos/acesso_googletalk"
acl livre proxy_auth "/etc/squid/acessos/acesso_banda"
http_access allow acesso_googletalk bloquear_googletalk
http_access deny bloquear_googletalk
deny_info http://host.zanata.net.br/bloqueio bloquear_googletalk

########### Controle de banda
acl block src all
acl redelocal src 192.168.0.0/16
delay_pools 2

# Classe 1 - Acesso a Internet a 512k

delay_class 1 2
delay_parameters 1 -1/-1 69000/69000

# Classe 2 - Acesso a Internet a 180k

delay_class 2 2
delay_parameters 2 -1/-1 22500/22500
delay_access 1 allow livre
delay_access 2 allow block

http_access allow autenticados acesso_full
http_access allow acesso_full bloquear_palavras
http_access deny bloquear_palavras

http_access allow localhost
http_access allow redelocal

http_access deny all

zanata
(usa Debian)

Enviado em 11/10/2013 - 15:49h

Depois de bater muita cabeça... observando o código, percebi que era só o posicionamento das linhas do autenticador com as acl


---

Post anterior "trecho errado"
############## Conf ACLs
acl all src all
acl redelocal src 172.16.0.0/12
acl redelocal src 10.0.0.0/8
acl to_localhost dst 172.16.0.0-8.0.0.0/32
acl localhost src 127.0.0.1/32
acl Safe_ports port 80
#acl SSL_ports port port 443 563
acl Safe_ports port 21 # http
acl Safe_ports port 443 563 # ftp
acl Safe_ports port 70 # https, snews
acl Safe_ports port 210 # gopher
acl Safe_ports port 280 # wais
acl Safe_ports port 488 # http-mgmt
acl Safe_ports port 591 # gss-http
acl Safe_ports port 777 # filemaker
acl Safe_ports port 901 # multiling http
acl Safe_ports port 1025-65535 # swat
acl purge method PURGE # portas altas
acl CONNECT method CONNECT
acl manager proto cache_object
acl autenticados proxy_auth REQUIRED

########### Direitos de Acessos
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge

########### mysqlt_auth
auth_param basic program /usr/lib/squid/mysqlt_auth
auth_param basic realm TI-SAUDE

-------------

Post atual "Trecho correto"

########### mysqlt_auth
auth_param basic program /usr/lib/squid/mysqlt_auth
auth_param basic realm TI-SAUDE

############## Conf ACLs
acl all src all
acl redelocal src 172.16.0.0/12
acl redelocal src 10.0.0.0/8
acl to_localhost dst 172.16.0.0-8.0.0.0/32
acl localhost src 127.0.0.1/32
acl Safe_ports port 80
#acl SSL_ports port port 443 563
acl Safe_ports port 21 # http
acl Safe_ports port 443 563 # ftp
acl Safe_ports port 70 # https, snews
acl Safe_ports port 210 # gopher
acl Safe_ports port 280 # wais
acl Safe_ports port 488 # http-mgmt
acl Safe_ports port 591 # gss-http
acl Safe_ports port 777 # filemaker
acl Safe_ports port 901 # multiling http
acl Safe_ports port 1025-65535 # swat
acl purge method PURGE # portas altas
acl CONNECT method CONNECT
acl manager proto cache_object
acl autenticados proxy_auth REQUIRED

########### Direitos de Acessos
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge