How to password protect light squid reports


PFSence – proudly a Linux distribution gives us a very good firewall along with the internet filtering and monitoring facility. Internet filtering is done by Squid and Squid Guard. Monitoring part is done by Light Squid service which could be easily added through the System package.  
Once the configuration is up and running, though the PFSence main interface is password protected light squids reports could be accessed without any password and this will not be a good idea to keep this as it is. So to password protect your light Squid reports do the following.

Step One
Edit the file - /etc/inc/system.inc

And insert a mod authentication method as shown in the below image 1.

Step Two
Insert the below code right after server modules. (Refer image 1)

\$HTTP["url"] =~ "^/lightsquid/" {
auth.backend = "plain"
auth.backend.plain.userfile = "/var/etc/lighttpd-plain.myusers"
auth.require = ("/lightsquid" => (
"method" => "digest",
"realm" => "lightsquid",
"require" => "valid-user"
))
}













Step Three
Now that you have pointed the auth backend plain user file to a location you have to create a new file at the specified location and insert username and passwords as required.

To do that follow the below steps


  • Download putty and login to the PFSense server via SSH
  • Select the shell option (8)
  • Copy and paste the following and press enter 
  • /var/etc/lighttpd-plain.myusers
  • Enter user name and password one after the other as shown below.





Step Four

Restart the web configurator by using the following command in putty or SSH

/etc/rc.restart_webgui

This will enable a password request for light squid reports.

6 comments:
Write comments
  1. Hello, your description is awesome! Thanks for the help! :)
    However, version 2.2.2 file /var/etc/lighttpd-plain.myusers after reboot is not, can you help.

    ReplyDelete
    Replies
    1. Update your PFsense to the new version which has everything covered right away in the webmin itself.

      Delete
  2. This is a smart blog. I mean it. You have so much knowledge about this issue, and so much passion. You also know how to make people rally behind it, obviously from the responses. PCs Folder Lock - Don't Spend Time Searching for, Read through Information On PC Devices On this web page folder password protect

    ReplyDelete
  3. Wow, fantastic blog structure! How lengthy have you ever been running a blog for? You made running a blog glance easy. The total glance of your web site is magnificent, as smartly as the content! Advice: Seven Things To Do Immediately About Encryption Software & How To How To Encrypt A Password For Free The Spartan Way.

    ReplyDelete
  4. This tutorial is going to show you what you need to do to reset the password on your PC, so that you can log in again without losing any of your data, files or settings.reset windows 10 password

    ReplyDelete