Link to home
Start Free TrialLog in
Avatar of IMGIDC
IMGIDCFlag for India

asked on

Monitoring Squid Proxy Traffic

Hi,

installed and configured squid proxy with Cache Manager.
i can able to access cache manager web interface (login page ). but, when i enter credentials i am getting " Permission denied error "

any ideas how to resolve this.

Thanks,
RafiUser generated image
Avatar of giltjr
giltjr
Flag of United States of America image

Per:

http://www.sbarjatiya.com/notes_wiki/index.php/Configuring_squid_cache_manager

You should be using the userid root and the password you have configured for cachemgr_passwd in squid.conf.

Is that what you are doing?
You should not be specifying a port in the cachmgr login.

i.e. 127.0.0.1 might not be a "valid" host for cachemgr auth.  Try in the login to cachemgr cgi-bin to reference the systems LAN IP.

192.168.0.3
root
password

It can also vary and use the server's name.
Avatar of IMGIDC

ASKER

none of them are working for me guys. let me give some more information.

attached cachemgr.conf file created in /etc/httpd/conf.d directory and squid.conf file with cache manager rules.

- when i try to use configuration from link, i received below error message.
http://www.sbarjatiya.com/notes_wiki/index.php/Configuring_squid_cache_manager

[root@proxy etc]# /opt/squid/3.4.3/sbin/squid -k shutdown
2014/03/10 10:14:08| aclParseAclLine: ACL 'manager' already exists with differen                                                                                                                                                             t type.
FATAL: Bungled /opt/squid/3.4.3/etc/squid.conf line 14: acl manager proto cache_                                                                                                                                                             object
Squid Cache (Version 3.4.3): Terminated abnormally.
CPU Usage: 0.020 seconds = 0.010 user + 0.010 sys
Maximum Resident Size: 18064 KB


NOTE: i also tried to access using it's ip address !!!
squid-config.txt
squid-cachemgr.txt
The error you get when you follow the referenced link is likely because you duplicate entries.

Your issue with access deals with your definition of the webserver ACL which is in conflict.
Your rule is to allow all. You then within the cachemgr interface going to localhost, but the rule requires the source IP accessing cachemgr to be the webserver.

Either remove the webserver from the manager  entry
Http_access allow localhost manager webserver
Or change the ACL webserver src
To include your LAN, or you ..........
ASKER CERTIFIED SOLUTION
Avatar of IMGIDC
IMGIDC
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of IMGIDC

ASKER

Resolved by self