Thank you amos , but I have an issue with connection :
Here is my mysql info :
========
grant select on squid.* to 'squid'@'%' identified by 'squid';
=====================
mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| mysql              |
| squid              |
+--------------------+
3 rows in set (0.00 sec)

mysql> use squid
Database changed
mysql> ;
ERROR: 
No query specified

mysql> show tables;
+-----------------+
| Tables_in_squid |
+-----------------+
| passwd          |
+-----------------+
1 row in set (0.00 sec)

mysql> select from * passwd;
ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that 
corresponds to your MySQL server version for the right syntax to use near 'from 
* passwd' at line 1
mysql> select * from  passwd;
+--------+----------+---------+-----------+---------------------+
| user   | password | enabled | fullname  | comment             |
+--------+----------+---------+-----------+---------------------+
| Nikesh | test     |       1 | Test User | for testing purpose |
+--------+----------+---------+-----------+---------------------+
1 row in set (0.00 sec)

mysql> show GRANTS FOR 'squid'
    -> ;
+------------------------------------------------------------------------------------------------------+
| Grants for squid@%                                                            
                       |
+------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'squid'@'%' IDENTIFIED BY PASSWORD 
'*AFD42D37182BDB40880BEF624CC64B0F4A1E35B4' |
| GRANT SELECT ON `squid`.* TO 'squid'@'%'                                      
                       |
+------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)

mysql>
===========================================

now on the squid box , I do the conection below :

here is the connection from remote squid:
/lib/squid/basic_db_auth --dsn "DBI:mysql:database=squid:host=x.x189.177" 
--user "squid" --password "squid" --table "user" --usercol "user" --passwdcol 
"password" --cond "" --plaintext





DBD::mysql::st execute failed: Table 'squid.user' doesn't exist at 
/lib/squid/basic_db_auth line 215, <> line 1.
DBD::mysql::st execute failed: MySQL server has gone away at 
/lib/squid/basic_db_auth line 218, <> line 1.
ERR database error
DBD::mysql::st execute failed: Table 'squid.user' doesn't exist at 
/lib/squid/basic_db_auth line 215, <> line 2.
DBD::mysql::st execute failed: MySQL server has gone away at 
/lib/squid/basic_db_auth line 218, <> line 2.
ERR database error
DBD::mysql::st execute failed: Table 'squid.user' doesn't exist at 
/lib/squid/basic_db_auth line 215, <> line 3.
DBD::mysql::st execute failed: MySQL server has gone away at 
/lib/squid/basic_db_auth line 218, <> line 3.
ERR database error
DBD::mysql::st execute failed: Table 'squid.user' doesn't exist at 
/lib/squid/basic_db_auth line 215, <> line 4.
DBD::mysql::st execute failed: MySQL server has gone away at 
/lib/squid/basic_db_auth line 218, <> line 4.
ERR database error
^C


Selinux , iptables are down on both mahcines .


Any other things we need to look @  ??????

The question is being asked , is it suid or mysql issue??

Wt other thing need to check ?


==========
squid -v
Squid Cache: Version 3.5.1
Service Name: squid
configure options:  '--prefix=/usr' '--includedir=/include' 
'--mandir=/share/man' '--infodir=/share/info' '--sysconfdir=/etc' 
'--enable-cachemgr-hostname=drx' '--localstatedir=/var' 
'--libexecdir=/lib/squid' '--disable-maintainer-mode' 
'--disable-dependency-tracking' '--disable-silent-rules' '--srcdir=.' 
'--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' 
'--mandir=/usr/share/man' '--enable-inline' '--enable-async-io=8' 
'--enable-storeio=ufs,aufs,diskd,rock' '--enable-removal-policies=lru,heap' 
'--enable-delay-pools' '--enable-cache-digests' '--enable-underscores' 
'--enable-icap-client' '--enable-follow-x-forwarded-for' '--enable-auth' 
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,DB,POP3,getpwnam,squid_radius_auth,multi-domain-NTLM'
 '--enable-ntlm-auth-helpers=smb_lm' 
'--enable-digest-auth-helpers=ldap,password' 
'--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-esi' 
'--disable-translation' '--with-logdir=/var/log/squid' 
'--with-pidfile=/var/run/squid.pid' '--with-filedescriptors=131072' 
'--with-large-files' '--with-default-user=squid' '--enable-linux-netfilter' 
'--enable-ltdl-convenience' '--enable-ssl' '--enable-ssl-crtd' 
'--enable-arp-acl' 'CXXFLAGS=-DMAXTCPLISTENPORTS=20000' '--with-openssl' 
'--enable-snmp'
[root@squid ~]#
==================================

Thanks again for help
-----Original Message-----
From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf 
Of Amos Jeffries
Sent: Monday, February 9, 2015 4:15 PM
To: squid-users@lists.squid-cache.org
Subject: Re: [squid-users] squid authentication to remote sql server

On 10/02/2015 5:01 p.m., Ahmad wrote:
> Hi ,
> 
> I followed the article in  :
> 
> http://wiki.squid-cache.org/ConfigExamples/Authenticate/Mysql
> 
>  
> 
>  
> 
> I need to connect  squid to external sql server  , what do I need to 
> modify in the helper command ?
> 
>  
> 
> I think that the command below :
> 
> ""auth_param basic program /usr/local/squid/libexec/squid_db_auth 
> --user someuser --password xxxx --plaintext --persist
> 
>  
> 
> Shoud include the ip  & port of the sql server .
> 

The Data Source Name (--dsn) parameter is the option string passed to the Perl 
DBI module for locating the database to use.

It takes the syntax:

  "DSN:" driver ":" params

The params bit depends on what database driver (type) is. The "mysql"
driver uses semi-colon separated key=value pairs.

So you can write something like:

  --dsn "DSN:mysql:host=example.com;port=3306;database=squid"


Amos
_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to