[squid-users] authentication setup for squid-internal-mgr

Eliezer Croitoru eliezer at ngtech.co.il
Tue Oct 6 19:53:50 UTC 2015


I assume you are not using default squid.conf since what you are 
describing is not squid default settings from sources.
You can use basic auth and others to protect this page.
What have you tried until now?
Can you share your squid.conf so it will make more sense?


On 06/10/2015 20:41, Tory M Blue wrote:
> So I was playing with squid-internal-mgr (replacement for cachemgr.cgi it
> seems), but I have no real authentication access , other than my ACL's
> acl manager url_regex -i ^cache_object:// +i
> ^https?://[^/]+/squid-internal-mgr/
> And limited to my networks obviously.
> But as of now those pages are wide open, so anyone could go to /menu and
> see /shutdown and type that in and bingo bango my squid server is shutdown.
> So was wondering if there is a way to make some of these pages require
> authentication? I'm not clear what "public" means in each instance below,
> sooo..
> Thanks
> Tory
> index                 	Cache Manager Interface         	public
>   menu                  	Cache Manager Menu              	public
>   offline_toggle        	Toggle offline_mode setting     	public
>   shutdown              	Shut Down the Squid Process     	public
>   reconfigure           	Reconfigure Squid               	public
>   rotate                	Rotate Squid Logs               	public
>   cached_ssl_cert       	Statistic of cached generated ssl certificates	public
>   pconn                 	Persistent Connection Utilization Histograms	public
>   mem                   	Memory Utilization              	public
>   squidaio_counts       	Async IO Function Counters      	public
>   diskd                 	DISKD Stats                     	public
>   config                	Current Squid Configuration     	public
>   client_list           	Cache Client List               	public
>   comm_epoll_incoming   	comm_incoming() stats           	public
>   ipcache               	IP Cache Stats and Contents     	public
>   fqdncache             	FQDN Cache Stats and Contents   	public
>   idns                  	Internal DNS Statistics         	public
>   redirector            	URL Redirector Stats            	public
>   store_id              	StoreId helper Stats            	public
>   external_acl          	External ACL stats              	public
>   http_headers          	HTTP Header Statistics          	public
>   info                  	General Runtime Information     	public
>   service_times         	Service Times (Percentiles)     	public
>   filedescriptors       	Process Filedescriptor Allocation	public
>   objects               	All Cache Objects               	public
>   vm_objects            	In-Memory and In-Transit Objects	public
>   io                    	Server-side network read() size histograms	public
>   counters              	Traffic and Resource Counters   	public
>   peer_select           	Peer Selection Algorithms       	public
>   digest_stats          	Cache Digest and ICP blob       	public
>   5min                  	5 Minute Average of Counters    	public
>   60min                 	60 Minute Average of Counters   	public
>   utilization           	Cache Utilization               	public
>   histograms            	Full Histogram Counts           	public
>   active_requests       	Client-side Active Requests     	public
>   username_cache        	Active Cached Usernames         	public
>   openfd_objects        	Objects with Swapout files open 	public
>   store_digest          	Store Digest                    	public
>   store_log_tags        	Histogram of store.log tags     	public
>   storedir              	Store Directory Stats           	public
>   store_io              	Store IO Interface Stats        	public
>   store_check_cachable_stats	storeCheckCachable() Stats      	public
>   refresh               	Refresh Algorithm Statistics    	public
>   delay                 	Delay Pool Levels               	public
>   forward               	Request Forwarding Statistics   	public
>   cbdata                	Callback Data Registry Contents 	public
>   sbuf                  	String-Buffer statistics        	public
>   events                	Event Queue                     	public
>   netdb                 	Network Measurement Database    	public
>   asndb                 	AS Number Database              	public
>   carp                  	CARP information                	public
>   userhash              	peer userhash information       	public
>   sourcehash            	peer sourcehash information     	public
>   server_list           	Peer Cache Statistics           	public
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

More information about the squid-users mailing list