Topic: Dansguardian + NCSA-auth + Windows

[stephen noble]

no, i just had a brain explosion
ignore that suggestion

try the server IP as the proxy

as you also have a problem with pam_auth, dans is just highlighting some other problem

[raem]

ardugh

I spotted some typos in the Howto where it said nsca, but should have said ncsa.
Check that you used the correct command syntax for enabling ncsa auth.
The Howto has been revised.

[Franco]

Does this mean I need to use Ident login on the workstation in order for ncsa_auth to work?

No!

[bloodshoteye]

I spotted some typos in the Howto where it said nsca, but should have said ncsa.
Check that you used the correct command syntax for enabling ncsa auth.

I noticed that on Wednesday, and apologise for not bringing it to snoble's attention.

Here's another typo:

You can test the authentication list using the following command

/usr/lib/squid/ncsa_auth /etc/proxyusers

Then enter the username & password when asked

You will see a ERR or OK response

You will not be asked - the cursor just winks at you. That fooled me until RayMitchell pointed out (higher up this thread) the user must enter a username password combo, then he will be given an ERR or OK.

try the server IP as the proxy
as you also have a problem with pam_auth, dans is just highlighting some other problem

I tried that and all the advice so far.
Then I applied for & installed dungog-dansguardian.

Sigh, I still have a problem - and I cannot re-install this server - so I've removed and re-installed all apllicable rpms 4 times... GPL version, then dungog version, then GPL version ad nauseum.

Latest woe, using dungog software: Dans with default + 2 filter groups & Squid enabled : browsers go straight out to wherever, although I have ncsa_auth with no transparent proxy, but with port blocking.
If I set http://proxy/proxy.pac or IP:port manually: "This page cannot be displayed"

I have added my box to the exceptioniplist. If set proxy manually or via http://proxy/proxy.pac, I get "The connection to the server was reset while the page was loading"

Can someone please help? - will provide further info if wanted.
 
Update:
I've just restarted dans with dansguardian -Q and browsers requested authentication, which was accepted. The process must be dying after a time - I swear it also worked briefly much earlier on.
Why would it start, then die?

Confirmed!! - less than 5 mins later a user no longer can refresh or move on. Killing the browser and restarting it brings up a "This page cannot be displayed"
Removing proxy detail from the browser and it goes anywhere you want.

Where could I look?
.

[stephen noble]

In contrast, a linux (Ubuntu) box running  Firefox prompts immediately for credentials.

if this is so, this isn't a sme server problem

i'd unblock 80 and 3128 for now
try using pam_auth until you prove dans works on windows
install a vanilla windows

[raem]

ardugh

Have you done this step ?

config setprop squid Transparent no
expand-template /etc/squid/squid.conf
sv t /service/squid

[bloodshoteye]

Have you done this step ?

config setprop squid Transparent no
expand-template /etc/squid/squid.conf
sv t /service/squid

Yes
squid=service
    EnforceSafePorts=no
    RequireAuth=ncsa
    SafePorts=21,70,80,81,119,210,443,563,980,1024-65535
    TCPPort=3128
    TCPProxyPort=80:3128
    Transparent=no
    TransparentPort=8080
    access=private
    status=enabled

if this is so, this isn't a sme server problem

The issue has shifted somewhat - that may have been some config error on my part.
Now it seems (ref my rather lengthy post earlier - sorry for that) that dansguardian is dying after a few minutes - I cannot imagine why.

[bloodshoteye]

Now it seems (ref my rather lengthy post earlier - sorry for that) that dansguardian is dying after a few minutes - I cannot imagine why.

I think I answered my own question by applying the recommendation  in this thread:
http://forums.contribs.org/index.php?topic=39344.0
Dansguardian isn't dying at the moment 

[bloodshoteye]

I give up, sad to say 
I've tried everything I can think of. It seems users can do what they want, never mind what I try to set.
Under the circumstances, I feel like dropping the box out of the window - spent an entire week on squid/dansguardian, day and night.

Please tell - at the moment the box has both dungog-dansguardian installed and smeserver-dansguardian installed.
Do they conflict or does dungog need the sme rpm? - So far I can't find the answer to that. It may explain the erratic behavior of all the tests I've made.

[raem]

ardugh

Did you purchase (ie pay for), the dungog dansguardian product ?

[bloodshoteye]

Did you purchase (ie pay for), the dungog dansguardian product ?

Hi RayMitchell - yes I did.

[raem]

ardugh

Then you should ONLY be installing the rpms from dungog, ie the commercial ones, and you should be getting support direct from dungog, not via these forums.

You should not be following the contribs.org wiki Howto as that is not applicable to you, but instead follow the information on the dungog website.

[bloodshoteye]

Then you should ONLY be installing the rpms from dungog, ie the commercial ones, and you should be getting support direct from dungog, not via these forums.

You should not be following the contribs.org wiki Howto as that is not applicable to you, but instead follow the information on the dungog website.

I hear what you say, however the steps (as per their instructions) are:
1) install dansguardian
2) install smeserver-dansguardian
3) install dungog-dansguardian - to quote: "this just allows you to change the config files by the panel rather than by hand
it doesn't do anything else to dansguardian"

While admittedly not all Wiki steps need be followed, it appears some do, hence my (a relative newbie) confusion and this thread - particularly as you-all are extremely knowlegable.
I have requested assistance from them and hopefully I will be able to clear up my problem soonish.
I also receive replies from this list within my time zone's working hours as opposed to AU being 8 hrs ahead of me, which has been a major factor in asking for help. I hope I haven't stepped on anyone's toes.

Thanks,