[squid-users] when/who login in to proxy?

[Amos Jeffries]

On 13/02/2015 10:27 a.m., Alan Boba wrote:
> I've been able to set up digest file authentication on the Squid proxy by adding the following to squid3.conf.
> auth_param digest program /usr/lib/squid3/digest_file_auth -c /etc/squid3/passwordsauth_param digest realm proxyacl authenticated proxy_auth REQUIREDhttp_access allow authenticated
> 
> I have a user called testuser. When attempting to browse a login challenge is displayed. The account login works, web browsing works. 
> How to track account used and when logins occur? My online searches have been fruitless.
> I tried discovering what log file it may be in by examining all logs on the server# grep testuser /var/log/*
> 
> That produced only two hits, both in /var/log/auth.log
> The first hit was from the htdigest command used to create testuser and the second was from the sudo grep testuser command used to search the log files
> 

The Squid access.log has a username column which should contain a name
for each transaction where a login was used. That is probably in
/var/log/squid/access.log or a similar path.

<http://wiki.squid-cache.org/Features/LogFormat#Squid_native_access.log_format_in_detail>

Amos