<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Tested thanks for the reply and idea access denied and tested with a firewall rule to approve everything to port 80 same result with or without mgr_passord configured, it is like the page is missing in Squid 6.6 or something <div><br></div><div><div class="panel-heading" style="box-sizing: border-box; padding: 5px 15px; border-bottom-width: 1px; border-bottom-style: solid; border-color: rgb(214, 233, 198); border-radius: 0px; color: rgb(60, 118, 61); background-color: rgb(223, 240, 216); font-family: Roboto, sans-serif; font-size: 14px;"><h2 class="panel-title" style="box-sizing: border-box; font-family: inherit; font-weight: 500; line-height: 1.1; margin-top: 0px; margin-bottom: 0px; font-size: 16px;">Shell Output - curl localhost:3128/squid-internal-mgr/info -u admin:redacted</h2></div><div class="panel-body" style="box-sizing: border-box; padding: 0px; caret-color: rgb(51, 51, 51); color: rgb(51, 51, 51); font-family: Roboto, sans-serif; font-size: 14px; background-color: rgb(255, 255, 255);"><div class="content" style="box-sizing: border-box; padding: 10px;"><pre style="box-sizing: border-box; overflow: auto; font-family: Menlo, Monaco, Consolas, "Courier New", monospace; font-size: 13px; padding: 9.5px; margin-top: 0px; margin-bottom: 10px; line-height: 1.428571; word-break: break-all; overflow-wrap: break-word; background-color: rgb(245, 245, 245); border: 1px solid rgb(204, 204, 204); border-radius: 4px;"> % Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
100 3783 100 3783 0 0 111k 0 --:--:-- --:--:-- --:--:-- 115k
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html><head>
<meta type="copyright" content="Copyright (C) 1996-2023 The Squid Software Foundation and contributors">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>ERROR: The requested URL could not be retrieved</title>
<style type="text/css"><!--
/*
* Copyright (C) 1996-2023 The Squid Software Foundation and contributors
*
* Squid software is distributed under GPLv2+ license and includes
* contributions from numerous individuals and organizations.
* Please see the COPYING and CONTRIBUTORS files for details.
*/
/*
Stylesheet for Squid Error pages
Adapted from design by Free CSS Templates
http://www.freecsstemplates.org
Released for free under a Creative Commons Attribution 2.5 License
*/
/* Page basics */
* {
font-family: verdana, sans-serif;
}
html body {
margin: 0;
padding: 0;
background: #efefef;
font-size: 12px;
color: #1e1e1e;
}</pre></div></div><div><br><blockquote type="cite"><div>On Jul 22, 2024, at 11:24, Jonathan Lee <jonathanlee571@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><div>Ok thanks let me boot that environment and test again, my concern is that is looks like it is attempting it from my WAN side address that is my wan address and not the loopback <br><br><blockquote type="cite">On Jul 22, 2024, at 11:22, Francesco Chemolli <gkinkie@gmail.com> wrote:<br><br>Not really, no. Username is not considered, it's just to make sure<br>that curl sends all the data<br><br>On Mon, Jul 22, 2024 at 7:21 PM Jonathan Lee <jonathanlee571@gmail.com> wrote:<br><blockquote type="cite"><br>That would require a username for the cachemgr_password account right? I have no usernames set up for this.<br><br>How does one add a username for this directive ?<br><br><blockquote type="cite">On Jul 22, 2024, at 11:13, Francesco Chemolli <gkinkie@gmail.com> wrote:<br><br>Can you try supplying a username to curl? It's also common practice to<br>put flags ('-u user:redacted') before arguments (the URL)<br><br>On Mon, Jul 22, 2024 at 5:12 PM Jonathan Lee <jonathanlee571@gmail.com> wrote:<br><blockquote type="cite"><br>Thanks for the info<br><br>I tried it and this also failed. Dang<br><br>Shell Output - curl localhost:3128/squid-internal-mgr/info -u :redacted<br><br>% Total % Received % Xferd Average Speed Time Time Time Current<br> Dload Upload Total Spent Left Speed<br><br>0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0<br>100 3773 100 3773 0 0 90756 0 --:--:-- --:--:-- --:--:-- 94325<br><!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><br><html><head><br><meta type="copyright" content="Copyright (C) 1996-2023 The Squid Software Foundation and contributors"><br><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><br><title>ERROR: The requested URL could not be retrieved</title><br><style type="text/css"><!--<br>/*<br>* Copyright (C) 1996-2023 The Squid Software Foundation and contributors<br>*<br>* Squid software is distributed under GPLv2+ license and includes<br>* contributions from numerous individuals and organizations.<br>* Please see the COPYING and CONTRIBUTORS files for details.<br>*/<br><br>/*<br>Stylesheet for Squid Error pages<br>Adapted from design by Free CSS Templates<br>http://www.freecsstemplates.org<br>Released for free under a Creative Commons Attribution 2.5 License<br>*/<br><br>However I get a new error when attempting to connect over a web browser<br><br>ERROR<br><br>The requested URL could not be retrieved<br><br>________________________________<br><br>Invalid Request error was encountered while trying to process the request:<br><br>GET /squid-internal-mgr HTTP/1.1<br>Host: lee_family.home.arpa:3128<br>Upgrade-Insecure-Requests: 1<br>Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8<br>User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15<br>Accept-Language: en-US,en;q=0.9<br>Accept-Encoding: gzip, deflate<br>Connection: keep-alive<br>DNT: 1<br><br>Some possible problems are:<br><br>Request is too large.<br><br>Content-Length missing for POST or PUT requests.<br><br>Illegal character in hostname; underscores are not allowed.<br><br>HTTP/1.1 Expect: feature is being asked from an HTTP/1.0 software.<br><br>Your cache administrator is<br><br><br><br>On Jul 22, 2024, at 04:42, Andrey K <ankor2023@gmail.com> wrote:<br><br>Hello, Jonathan,<br><br><blockquote type="cite">curl http://localhost:3128/squid-internal-mgr/info<br></blockquote><br><blockquote type="cite">Where would I place the password?<br></blockquote><br>I use the following configuration:<br>http_access allow localhost manager<br>cachemgr_passwd redacted config<br><br>The command to read the current running config is:<br>curl localhost:3128/squid-internal-mgr/config -u :redacted<br><br><br>Kind regards,<br> Ankor.<br><br><br><br><br>чт, 18 июл. 2024 г. в 17:07, Alex Rousskov <rousskov@measurement-factory.com>:<br><blockquote type="cite"><br>On 2024-07-18 00:55, Jonathan Lee wrote:<br><br><blockquote type="cite">curl http://localhost:3128/squid-internal-mgr/info<br><br>Where would I place the password?<br></blockquote><br>See "man curl" or online manual pages for curl. They will point you to<br>two relevant options: --user and --proxy-user. AFAICT, your particular<br>cache manager requests are sent _to_ the proxy (as if it were an origin<br>server) rather than _through_ the proxy. Thus, you should use --user.<br><br>As I keep saying on this thread, due to Squid complications related to<br>Bug 5283, specifying seemingly correct client parameters may not be<br>enough to convince Squid to accept the cache manager request. I<br>recommend the following procedure:<br><br>1. List the corresponding http_port directive first, before any other<br>http_port, https_port, and ftp_port directives. Do not use interception<br>of any kind for this cache manager port.<br><br>2. Use curl with absolute squid-internal-mgr URLs with http scheme (like<br>you show above). Do _not_ use "curl --proxy" or similar. Do not use<br>https scheme.<br><br>3. In that absolute mgr URL, use the host name that matches<br>visible_hostname in squid.conf. If you do not have visible_hostname in<br>squid.conf, add it. This is not required, but, due to Squid bugs, it is<br>often much easier to get this to work with visible_hostname than without it.<br><br>4. Make (passwordless) mgr:info use case working first, before trying to<br>get password-protected pages working.<br><br>5. When you do specify a username and a password, remember that you are<br>sending this request to an (equivalent of) a service running on an<br>origin server, _not_ a proxy (hence --user rather than --proxy-user).<br><br><br>If you cannot figure it out despite carefully going through the above<br>steps, share (privately if needed) a pointer to compressed ALL,9<br>cache.log while reproducing the problem with throw-away credentials on<br>an idle Squid with a single curl request. Mention which step you got<br>stuck on.<br><br><br>HTH,<br><br>Alex.<br><br>_______________________________________________<br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br>https://lists.squid-cache.org/listinfo/squid-users<br></blockquote><br>_______________________________________________<br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br>https://lists.squid-cache.org/listinfo/squid-users<br><br><br>_______________________________________________<br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br>https://lists.squid-cache.org/listinfo/squid-users<br></blockquote><br><br><br>--<br> Francesco<br></blockquote><br></blockquote><br><br>-- <br> Francesco<br></blockquote><br></div></div></blockquote></div><br></div></body></html>