Re: [squid-users] help with external_acl_type for php auth

John Peterson wrote:
>
> Still having problems using the external_acl_type command. Can someone point me in the right direction. I have some example code that was working with the regular auth_param basic but I would like to use the external_acl_type because it can call the program when needed, however I'm not having any luck applying the code. Thanks for your help.
>
>
> https_port 442 defaultsite=www.tucows.com accel vhost
> cert=/squid-cert5/regobie2-c.crt
> key=/squid-cert5/squid_key.pem vhost
>
> logfile_rotate 8
>
> #both cache pools go to the same server, but we want to
> control how people access the site via the #acl lists. On
> port 443 they need a CAC, on 442 they can login via the sql
> server.
> #cache for server test.com
>
> visible_hostname proxy
> #auth_param basic program /usr/bin/php
> /usr/local/squid/libexec/squid_php_auth.php
> #auth_param basic children 40
> #auth_param basic realm proxy_auth
> #auth_param basic credentialsttl 2 hours
> external_acl_type MyAclHelper %LOGIN /usr/bin/php
> /usr/local/squid/libexec/squid_php_auth.php

The %LOGIN option requires auth_param settings setup to do the login.
Which is then passed to the external helper.

It looks to me like the auth_param details are what you were wanting.
However I notice there are no http_access lines using the port ACL. This
may be where your testing shows bad results.

> acl proxyauth external MyAclHelper
> #acl proxyauth proxy_auth REQUIRED
>
> acl noport2 myport 443
> #acl Auth proxy_auth REQUIRED
> acl noport myport 442
> #this acl is just assiging a acl name to the test.com
> location. We will use this acl name in the #http_access
> section. We can also combine acl lists together.
>
> cache_peer www.tucows.com parent 80 0 no-query originserver
> login=PASS name=www.tucows.com
> acl site3 dstdomain www.tucows.com
> cache_peer_access www.tucows.com allow site3
> #http_access allow site3
> http_access allow site3 proxyauth
> #http_access allow site3 Auth
>
> #acl all src 0.0.0.0/0.0.0.0
>
> http_access deny all
> debug_options ALL,1 32,2
> cache_effective_user squid
> cache_effective_group squid
> cache_access_log /usr/local/squid/var/logs/access.log
>
>
>

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20
   Current Beta Squid 3.1.0.15