[squid-users] squid authentication to remote sql server

[snakeeyes]

Hi amos
I hadded squi/squid in the table

mysql> show tables
    -> ;
+-----------------+
| Tables_in_squid |
+-----------------+
| passwd          |
+-----------------+
1 row in set (0.00 sec)

mysql> select * from passwd;
+--------+----------+---------+-----------+---------------------+
| user   | password | enabled | fullname  | comment             |
+--------+----------+---------+-----------+---------------------+
| Nikesh | test     |       1 | Test User | for testing purpose |
| squid  | squid    |       1 | Test User | for testing purpose |
+--------+----------+---------+-----------+---------------------+
2 rows in set (0.00 sec)

mysql>



still has same error ?



how can u help me ?
login with md5 or wt ??


-----Original Message-----
From: Amos Jeffries [mailto:squid3 at treenet.co.nz] 
Sent: Tuesday, February 10, 2015 1:29 PM
To: Ahmad; squid-users at lists.squid-cache.org
Subject: Re: [squid-users] squid authentication to remote sql server

On 11/02/2015 8:17 p.m., Ahmad wrote:
> Thank you amos , I fixed the table thing , but I have new error now :
> 
> /lib/squid/basic_db_auth --dsn 
> "DBI:mysql:host=x.xx..189.177;port=3306;database=squid" --user "squid" 
> --password "squid" --table "passwd" --usercol "user" --passwdcol 
> "password" --cond "" --plaintext
> 
> ERR unknown login
> ERR unknown login
> ERR unknown login
> ERR unknown login
> ERR unknown login
> 
> 
> Wt do u think ??
> Mysql issue ?

Input issue. Thats a user:password combination being presented that does not exist in the table.

Though it might be mysql interpreting the "password" in queries as the built-in password() function. I renamed that column to "token" in my auth DB.

And like Yuri pointed out a DB of passwords in clear-text is not the greatest of security. At minimum use salted MD5 for the final setup.

Amos