<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yiv6275299748"><div style="color:#000;background-color:#fff;font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" id="yui_3_16_0_1_1423776305738_4461"><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr">I've been able to set up digest file authentication on the Squid proxy by adding the following to squid3.conf.</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="">auth_param digest program /usr/lib/squid3/digest_file_auth -c /etc/squid3/passwords</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="">auth_param digest realm proxy</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="">acl authenticated proxy_auth REQUIRED</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="">http_access allow authenticated<br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style=""><br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr">I have a user called testuser. When attempting to browse a login challenge is displayed. The account login works, web browsing works. </div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr">How to track account used and when logins occur? My online searches have been fruitless.</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr">I tried discovering what log file it may be in by examining all logs on the server</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"># grep testuser /var/log/*<br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br class="yiv6275299748" style=""></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr">That produced only two hits, both in /var/log/auth.log</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr">The first hit was from the htdigest command used to create testuser and the second was from the sudo grep testuser command used to search the log files</div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br></div><div id="yiv6275299748yui_3_16_0_1_1423766879926_4033" class="yiv6275299748" style="" dir="ltr"><br></div></div></div></div></body></html>