At my company, we are firewalling off certain servers which are on public IP addresses, but should only be accessed by our employees. We run IPTables rules on each server to which we are restricting access. It's working well for us, but we have some people who need to access these servers from various off-site locations. Using a proxy with LDAP authentication makes the most sense for us. DeleGate is the best open source proxy tool that I have seen. So as I was reading the docs, I realized that DeleGate cannot authenticate users against an LDAP server directly, but that it should be able to authenticate against a PAM service. And thru PAM, we can authenticate against our LDAP server. However, I have been unsuccessful in making DeleGate authenticate users against PAM. In order to keep things as simple as possible while troubleshooting, I added a local user (called 'tester') on my DeleGate server. When I browse to my DeleGate server, I am prompted for a username and password. I enter my username 'tester' and the correct password. DeleGate just repeatedly prompts me for authentication, but never accepts my valid logins. Here is my delegated command and its output: delegated -vv \ -P80 \ SERVER=http \ MOUNT="/* http://slashdot.org/*" \ AUTHORIZER="-pam/passwd" \ RELIABLE='*' 12/04 17:19:43.51 [7881] 0+0: PORT> -P80 12/04 17:19:43.51 [7881] 0+0: TMPFILE(new_shared) = (3) /home/delegate/tmp/dg7881.1.1070576383 12/04 17:19:43.51 [7881] 0+0: >>>TMPFILE(new_shared)>>>8181fa8[3] 12/04 17:19:43.52 [7881] 0+0: [-] localhost 12/04 17:19:43.52 [7881] 0+0: [-] 127.0.0.1 12/04 17:19:43.52 [7881] 0+0: HOSTS[0]=localhost/127.0.0.1 (PREDEF) 12/04 17:19:43.52 [7881] 0+0: [-] .af-local 12/04 17:19:43.52 [7881] 0+0: [-] 127.0.0.127 12/04 17:19:43.52 [7881] 0+0: HOSTS[1]=.af-local/127.0.0.127 (PREDEF) 12/04 17:19:43.52 [7881] 0+0: scanned HOSTS=localhost/127.0.0.1,.af-local/127.0.0.127 12/04 17:19:43.54 [7881] 0+0: *** GETHOSTBYNAME: arsenic.prioritynetworks.net / 0.00 secs. has_alias:0 12/04 17:19:43.54 [7881] 0+0: HOSTS[2]={arsenic.prioritynetworks.net,arsenic}/128.64.32.108 12/04 17:19:43.54 [7881] 0+0: configuring default RESOLV ... 12/04 17:19:43.55 [7881] 0+0: ... SYS: arsenic -> 128.64.32.108 12/04 17:19:43.58 [7881] 0+0: ... DNS: 128.64.32.108 -> arsenic.prioritynetworks.net 12/04 17:19:43.58 [7881] 0+0: ... DNS available 12/04 17:19:43.58 [7881] 0+0: ... NIS not available (no default domain) 12/04 17:19:43.59 [7881] 0+0: ... export RES_ORDER=CFD 12/04 17:19:43.59 [7881] 0+0: export RESOLV=cache,file,dns (set by default) 12/04 17:19:43.59 [7881] 0+0: setsockbuf[7] in:0->0 out:65535->131072 12/04 17:19:43.59 [7881] 0+0: --INITIALIZATION START: 8.7.7 on Linux/2.4.19-46um-- 12/04 17:19:43.59 [7881] 0+0: SPECIALIST: http 12/04 17:19:43.62 [7881] 0+0: server_open(delegate,:80,listen=20) 12/04 17:19:43.62 [7881] 0+0: listen(8,20) OK. 12/04 17:19:43.62 [7881] 0+0: server_open(delegate,:80) BOUND 12/04 17:19:43.62 [7881] 0+0: ##DeleGate/6.X: DGROOT=/home/delegate is set automatically. DGROOT="" will make it compatible with former versions. 12/04 17:19:43.62 [7881] 0+0: DGROOT=/home/delegate^M 12/04 17:19:43.62 [7881] 0+0: <DeleGate/8.7.7 by ysato AT delegate DOT org> [7881] -P80 READY^M <DeleGate/8.7.7 by ysato AT delegate DOT org> [7881] -P80 READY DGROOT=/home/delegate ADMIN=sysadmin@prioritynetworks.. AIST Product ID: 2000-ETL-198715-01, H14PRO-049 Copyright (c) 1994-2000 Yutaka Sato and ETL,AIST,MITI Copyright (c) 2001-2003 National Institute of Advanced Industrial Science and Technology (AIST) 12/04 17:19:43.62 [7881] 0+0: PORT= 80/8 (0,80) 12/04 17:19:43.63 [7881] 0+0: OWNER=nobody => OWNER=nobody/nogroup(nobody/nogroup) 12/04 17:19:43.63 [7881] 0+0: SPECIALIST: http 12/04 17:19:43.63 [7881] 0+0: ##DeleGate/6.X: MIMECONV=thru is set by default. MIMECONV="" will make it compatible with former versions. 12/04 17:19:43.63 [7881] 0+0: dirfopen(/home/delegate/log/errors.log,a): 8183758 [9] 12/04 17:19:43.63 [7881] 0+0: #### newRoute[NOTIFYPLTFM] 0/16 12/04 17:19:43.63 [7881] 0+0: [0] NOTIFYPLTFM=://:0-_-{}:{} 12/04 17:19:43.63 [7881] 0+0: #### newRoute[CMAP] 0/16 12/04 17:19:43.64 [7881] 0+0: [0] CMAP={-pam/passwd}AuthServer{*}:{*}:{*} 12/04 17:19:43.64 [7881] 0+0: #### newRoute[REMITTABLE] 0/16 12/04 17:19:43.64 [7881] 0+0: [0] REMITTABLE={}{http,https/{443,563},gopher,ftp,wais}:{*}:{*} 12/04 17:19:43.64 [7881] 0+0: REMITTABLE = http,https/{443,563},gopher,ftp,wais 12/04 17:19:43.64 [7881] 0+0: #### newRoute[RELIABLE] 0/16 12/04 17:19:43.64 [7881] 0+0: [0] RELIABLE=://:0-_-{}:{} 12/04 17:19:43.64 [7881] 0+0: #### newRoute[CMAP] 1/16 12/04 17:19:43.64 [7881] 0+0: [1] CMAP={delegate,nojava}relay{*}:{*}:{.localnet} 12/04 17:19:43.64 [7881] 0+0: #### newRoute[CMAP] 2/16 12/04 17:19:43.64 [7881] 0+0: [2] CMAP={proxy}relay{*}:{*}:{*} 12/04 17:19:43.64 [7881] 0+0: ### [0] gzip 0 12/04 17:19:43.64 [7881] 0+0: ### [1] /home/delegate/gzip 0 12/04 17:19:43.64 [7881] 0+0: ### [2] /home/delegate/lib/gzip 0 12/04 17:19:43.64 [7881] 0+0: ### [3] gzip 0 12/04 17:19:43.65 [7881] 0+0: ### [0] /sbin/gzip 0 12/04 17:19:43.65 [7881] 0+0: ### [1] /usr/sbin/gzip 0 12/04 17:19:43.65 [7881] 0+0: ### [2] /bin/gzip 818fce8 12/04 17:19:43.65 [7881] 0+0: PATH: gzip -> /bin/gzip 12/04 17:19:43.65 [7881] 0+0: #### gzip = [/bin/gzip]gzip 12/04 17:19:43.65 [7881] 0+0: #### gunzip = [/bin/gzip]gzip -d 12/04 17:19:43.65 [7881] 0+0: ADMIN=sysadmin@prioritynetworks.. protocol=http(specialist) -delegated[7881]- WARNING! ADMIN="your_mail_address" should be specified. -delegated[7881]- INFO: using ADMIN=sysadmin@prioritynetworks.. given at compile time. 12/04 17:19:43.65 [7881] 0+0: ##DeleGate/6.X: created directory/file will be non-sharable. SHARE="" will make it compatible with former versions. 12/04 17:19:43.65 [7881] 0+0: #### CACHE DISABLED #### Cache directory seems not exist: /home/delegate/cache 12/04 17:19:43.65 [7881] 0+0: /* http://slashdot.org/* 12/04 17:19:43.66 [7881] 0+0: IGNORE DUPLICATE MOUNT[0] /-* = default 12/04 17:19:43.66 [7881] 0+0: IGNORE DUPLICATE MOUNT[1] /=* = default 12/04 17:19:43.66 [7881] 0+0: MOUNT[0]X[3] /-/builtin/icons/* = default 12/04 17:19:43.66 [7881] 0+0: MOUNT[1]X[4] /-/* = forbidden,from=!.RELIABLE,default 12/04 17:19:43.66 [7881] 0+0: MOUNT[2]X[0] /-* = default 12/04 17:19:43.66 [7881] 0+0: MOUNT[3]X[1] /=* = default 12/04 17:19:43.66 [7881] 0+0: MOUNT[4]X[2] /* http://slashdot.org/* 12/04 17:19:43.66 [7881] 0+0: S[slashdot.org] = UP[]U[]P[] + HP[slashdot.org]H[slashdot.org]P[] 12/04 17:19:43.66 [7881] 0+0: gethostbyname(slashdot.org). 12/04 17:19:43.68 [7881] 0+0: *** gethostbyname(slashdot.org): slashdot.org / 0.02 secs. has_alias:0 12/04 17:19:43.68 [7881] 0+0: HOSTS[3]=slashdot.org/66.35.250.150 12/04 17:19:43.68 [7881] 0+0: MOUNT HOST slashdot.org=66.35.250.150 12/04 17:19:43.68 [7881] 0+0: [4] MOUNT=/ http://slashdot.org[66.35.250.150]:80/ 12/04 17:19:43.70 [7881] 0+0: HOSTS[3]=slashdot.org/66.35.250.150 marked PREDEF 12/04 17:19:43.70 [7881] 0+0: ##DeleGate/6.X: No default private-MASTER. MASTERP="" will make it compatible with former versions. 12/04 17:19:43.70 [7881] 0+0: #### stack size limit = 800000 (000000X) 12/04 17:19:43.71 [7881] 0+0: dirfopen(/home/delegate/act/pid/80,w+): 81a18c0 [10] 12/04 17:19:43.71 [7881] 0+0: Stay open PIDFILE for accept() lock[fd=10] 12/04 17:19:43.71 [7881] 0+0: env[28] LIBPATH=.;/home/delegate;/home/delegate/lib;. 12/04 17:19:43.71 [7881] 0+0: env[30] RESOLV=cache,file,dns 12/04 17:19:43.71 [7881] 0+0: arg[3] SERVER=http 12/04 17:19:43.71 [7881] 0+0: arg[4] MOUNT=/* http://slashdot.org/* 12/04 17:19:43.71 [7881] 0+0: arg[5] AUTHORIZER=-pam/passwd 12/04 17:19:43.71 [7881] 0+0: arg[6] RELIABLE=* 12/04 17:19:43.71 [7881] 0+0: TMPFILE(setLastModified) = (13) /home/delegate/tmp/dg7881.2.1070576383 12/04 17:19:43.71 [7881] 0+0: >>>TMPFILE(setLastModified)>>>81a1a70[13] 12/04 17:19:43.72 [7881] 0+0: dirfopen(/home/delegate/etc/params/80,r): 81a1be0 [14] 12/04 17:19:43.72 [7881] 0+0: DELEGATE_Modified[0]: 3fcf8194 12/04 17:19:43.72 [7881] 0+0: Accept-LOCK: 0 12/04 17:19:43.72 [7881] 0+0: --INITIALIZATION DONE: 8.7.7 on Linux/2.4.19-46um-- 12/04 17:19:50.09 [7881] 0+0: ## accept([8]:80)=15 12/04 17:19:50.11 [7882] 1+0: -- Fork(SequentialServer): 7881 -> 7882 12/04 17:19:50.11 [7882] 1+1: -- SockHost: [128.64.32.108] arsenic.prioritynetworks.net:80 12/04 17:19:50.14 [7882] 1+1: *** gethostbyaddr(63.239.28.189): 63-239-28-189.prioritynetworks.net / 0.02 secs. has_alias:0 12/04 17:19:50.14 [7882] 1+1: HOSTS[4]=63-239-28-189.prioritynetworks.net/63.239.28.189 12/04 17:19:50.14 [7882] 1+1: SPECIALIST: http 12/04 17:19:50.14 [7882] 1+1: #### newRoute[USERIDENT] 0/16 12/04 17:19:50.14 [7882] 1+1: [0] USERIDENT=://:0-_-{}:{} 12/04 17:19:50.14 [7882] 1+1: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,r+): 0 [-1] 12/04 17:19:50.14 [7882] 1+1: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,w+): 81a2120 [11] 12/04 17:19:50.14 [7882] 1+1: (0) accepted [43] -@[63.239.28.189]63-239-28-189.prioritynetworks.net:35554 (0.054s)(1) 12/04 17:19:50.15 [7882] 1+1: dirfopen(/home/delegate/adm/shutout/63.239.28.189,r): 0 [-1] 12/04 17:19:50.15 [7882] 1+1: KeepAlive[43] = 1 12/04 17:19:50.15 [7882] 1+1: execGeneralist->execSpecialist 12/04 17:19:50.15 [7882] 1+1: PATH: http://-:80!arsenic.prioritynetworks.net:80!63-239-28-189.prioritynetworks.net:35554!anonymous@63-239-28-189.prioritynetworks.net;1070576390 12/04 17:19:50.15 [7882] 1+1: #CEcl prepare ContEncoding:gzip,deflate 12/04 17:19:50.15 [7882] 1+1: IGNORE request: Keep-Alive: 300^M 12/04 17:19:50.16 [7882] 1+1: Accept-Language: en-us,en;q=0.7,ja;q=0.3 12/04 17:19:50.16 [7882] 1+1: HTTP Relay_request_head (424 bytes/9 lines) 12/04 17:19:50.16 [7882] 1+1: Proxy: host=63-239-28-189.prioritynetworks.net; User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630; DIRECT 12/04 17:19:50.16 [7882] 1+1: HCKA:[0] keep-alive; host=63-239-28-189.prioritynetworks.net; (User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630) 12/04 17:19:50.16 [7882] 1+1: HTTP Relay_request done (424 bytes/9 lines) 12/04 17:19:50.16 [7882] 1+1: gethostbyname(-) unknown[0.00s] 12/04 17:19:50.16 [7882] 1+1: HOSTS[5]=-/ 12/04 17:19:50.16 [7882] 1+1: TMPFILE(NULLFP) = (11) /home/delegate/tmp/dg7882.3.1070576390 12/04 17:19:50.16 [7882] 1+1: >>>TMPFILE(NULLFP)>>>81a3278[11] 12/04 17:19:50.16 [7882] 1+1: TMPFILE(NotAuthorized) = (15) /home/delegate/tmp/dg7882.4.1070576390 12/04 17:19:50.16 [7882] 1+1: >>>TMPFILE(NotAuthorized)>>>81a3558[15] 12/04 17:19:50.16 [7882] 1+1: *** gethostbyname(63.239.28.189) -> byaddr(4,2) 12/04 17:19:50.17 [7882] 1+1: [2] MOUNT ASIS: /- 12/04 17:19:50.17 [7882] 1+1: ####[builtin] /-/builtin/mssgs/401-unauth.dhtml 12/04 17:19:50.17 [7882] 1+1: ImMaster? 0 <http://-:80> <://:0/> 12/04 17:19:50.17 [7882] 1+1: *** / MOUNTED TO[4] http://slashdot.org/ *** 12/04 17:19:50.17 [7882] 1+1: *** / => http://slashdot.org/ *** 12/04 17:19:50.17 [7882] 1+1: REQUEST +M http://slashdot.org/12/04 17:19:50.17 [7882] 1+1: REALM: </> 12/04 17:19:50.17 [7882] 1+1/1: HCKA:[1] KeepAlive: GET A =>1 12/04 17:19:50.17 [7882] 1+1/1: TCP_NODELAY[43] 0 -> 1 12/04 17:19:50.17 [7882] 1+1/1: TCP_NODELAY[43] 1 -> 0 12/04 17:19:55.10 [7882] 1+1/1: ClosedOnTimeout(0): time=1070576395/1070576420 ppid=7881/7881 pid=7882/7882 12/04 17:19:55.11 [7882] 1+1/1: #CEcl prepare ContEncoding:gzip,deflate 12/04 17:19:55.11 [7882] 1+1/1: IGNORE request: Keep-Alive: 300^M 12/04 17:19:55.11 [7882] 1+1/1: Accept-Language: en-us,en;q=0.7,ja;q=0.3 12/04 17:19:55.11 [7882] 1+1/1: HTTP Relay_request_head (467 bytes/10 lines) 12/04 17:19:55.11 [7882] 1+1/1: Proxy: host=63-239-28-189.prioritynetworks.net; User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630; DIRECT 12/04 17:19:55.11 [7882] 1+1/1: HTTP Relay_request done (467 bytes/10 lines) 12/04 17:19:55.11 [7882] 1+1/1: AUTH_CACHE 0 pam://tester@-..:0 12/04 17:19:55.11 [7882] 1+1/1: expfopen: /home/delegate/adm/authorizer/passwd.-.pam/ea6d9268f6c5cb882a200fab2f813ed6-cache 12/04 17:19:55.11 [7882] 1+1/1: [0.00,-1][AUTH cache-NONE] /home/delegate/adm/authorizer/passwd.-.pam/ea6d9268f6c5cb882a200fab2f813ed6-cache 12/04 17:19:55.11 [7882] 1+1/1: ### [0] dgpam 0 12/04 17:19:55.12 [7882] 1+1/1: ### [1] /home/delegate/subin/dgpam 8183938 12/04 17:19:55.12 [7882] 1+1/1: ## dgpam = /home/delegate/subin/dgpam 12/04 17:19:55.14 [7882] 1+1/1: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,r+): 8183958 [8] PAM: cannot start passwd [tester] 12/04 17:19:55.18 [7882] 1+1/1: ## dgpam -a passwd tester = HTTP/1.0 403^M 12/04 17:19:55.18 [7882] 1+1/1: ## Auth/PAM = -1 <tester:****@-passwd.-.pam> 12/04 17:19:55.18 [7882] 1+1/1: AUTHORIZER=-pam/passwd host=[-passwd.-.pam] user=[tester] -> NO 12/04 17:19:55.18 [7882] 1+1/1: TMPFILE(NotAuthorized) = (8) /home/delegate/tmp/dg7882.5.1070576395 12/04 17:19:55.18 [7882] 1+1/1: >>>TMPFILE(NotAuthorized)>>>8183958[8] 12/04 17:19:55.18 [7882] 1+1/1: ####[reuse] /-/builtin/mssgs/401-unauth.dhtml 12/04 17:19:55.18 [7882] 1+1/1: ImMaster? 0 <http://-:80> <://:0/> 12/04 17:19:55.18 [7882] 1+1/1: *** / MOUNTED TO[4] http://slashdot.org/ *** 12/04 17:19:55.18 [7882] 1+1/1: *** / => http://slashdot.org/ *** 12/04 17:19:55.18 [7882] 1+1/1: REQUEST +M http://slashdot.org/12/04 17:19:55.18 [7882] 1+1/1: REALM: </> 12/04 17:19:55.18 [7882] 1+1/2: HCKA:[2] KeepAlive: GET A =>1 12/04 17:19:55.18 [7882] 1+1/2: TCP_NODELAY[43] 0 -> 1 12/04 17:19:55.18 [7882] 1+1/2: TCP_NODELAY[43] 1 -> 0 12/04 17:19:59.88 [7882] 1+1/2: HTTP CS got sigTERM(2) 12/04 17:19:59.88 [7882] 1+1/2: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,r+): 8183958 [8] 12/04 17:19:59.90 [7881] 1+0: DeleGate SERVER EXITS: caught SIGINT [2] 12/04 17:19:59.90 [7881] 1+0: Killpg(7881,15) 12/04 17:19:59.93 [7881] 1+0: (0) process [7882] dead 12/04 17:19:59.97 [7881] 1+0: dirfopen(/home/delegate/act/pid/80,r): 81a1da8 [8] 12/04 17:19:59.97 [7881] 1+0: FINISH. ================================================================================ The messages about not being able to find or access the temp files concerned me. So I checked that /home/delegate and everything underneath that directory was owned by nobody.nogroup. So the permissions looked fine. And 'ps aux' showed that my DeleGate proxy process was running as user "nobody". So I do not understand the errors with the temp files... Also, I noticed from Delegate's docs that an 403 error indicates "Forbidden to use the PAM server". I checked in my system logs to see what was happening, but found no entries corresponding to DelegGate's attempt to authenticate with PAM. So I thought that I misunderstood DeleGate's PAM documentation. Maybe I need to run the HTTPam server? So I tried running a DeleGate httpam server in addition to the standard proxy server process. Here are the two commands that I ran on my DeleGate server: delegated -vv \ -P8686 \ SERVER=httpam \ OWNER=root delegated -vv \ -P80 \ SERVER=http \ MOUNT="/* http://slashdot.org/*" \ AUTHORIZER="-pam//localhost.8686/passwd" \ RELIABLE='*' Here is the output from the DeleGate httpam process: 12/04 18:08:58.95 [7980] 0+0: PORT> -P8686 12/04 18:08:58.96 [7980] 0+0: TMPFILE(new_shared) = (3) /var/spool/delegate-root/tmp/dg7980.1.1070579338 12/04 18:08:58.96 [7980] 0+0: >>>TMPFILE(new_shared)>>>817b320[3] 12/04 18:08:58.96 [7980] 0+0: [-] localhost 12/04 18:08:58.96 [7980] 0+0: [-] 127.0.0.1 12/04 18:08:58.96 [7980] 0+0: HOSTS[0]=localhost/127.0.0.1 (PREDEF) 12/04 18:08:58.96 [7980] 0+0: [-] .af-local 12/04 18:08:58.96 [7980] 0+0: [-] 127.0.0.127 12/04 18:08:58.96 [7980] 0+0: HOSTS[1]=.af-local/127.0.0.127 (PREDEF) 12/04 18:08:58.96 [7980] 0+0: scanned HOSTS=localhost/127.0.0.1,.af-local/127.0.0.127 12/04 18:08:58.99 [7980] 0+0: *** GETHOSTBYNAME: arsenic.prioritynetworks.net / 0.00 secs. has_alias:0 12/04 18:08:58.99 [7980] 0+0: HOSTS[2]={arsenic.prioritynetworks.net,arsenic}/128.64.32.108 12/04 18:08:58.99 [7980] 0+0: configuring default RESOLV ... 12/04 18:08:58.99 [7980] 0+0: ... SYS: arsenic -> 128.64.32.108 12/04 18:08:59.03 [7980] 0+0: ... DNS: 128.64.32.108 -> arsenic.prioritynetworks.net 12/04 18:08:59.03 [7980] 0+0: ... DNS available 12/04 18:08:59.03 [7980] 0+0: ... NIS not available (no default domain) 12/04 18:08:59.03 [7980] 0+0: ... export RES_ORDER=CFD 12/04 18:08:59.03 [7980] 0+0: export RESOLV=cache,file,dns (set by default) 12/04 18:08:59.03 [7980] 0+0: setsockbuf[7] in:0->0 out:65535->131072 12/04 18:08:59.03 [7980] 0+0: --INITIALIZATION START: 8.7.7 on Linux/2.4.19-46um-- 12/04 18:08:59.03 [7980] 0+0: SPECIALIST: httpam 12/04 18:08:59.06 [7980] 0+0: server_open(delegate,:8686,listen=20) 12/04 18:08:59.06 [7980] 0+0: listen(8,20) OK. 12/04 18:08:59.06 [7980] 0+0: server_open(delegate,:8686) BOUND 12/04 18:08:59.06 [7980] 0+0: ##DeleGate/6.X: DGROOT=/var/spool/delegate-root is set automatically. DGROOT="" will make it compatible with former versions. 12/04 18:08:59.06 [7980] 0+0: DGROOT=/var/spool/delegate-root^M 12/04 18:08:59.06 [7980] 0+0: <DeleGate/8.7.7 by ysato AT delegate DOT org> [7980] -P8686 READY^M <DeleGate/8.7.7 by ysato AT delegate DOT org> [7980] -P8686 READY DGROOT=/var/spool/delegate-root ADMIN=sysadmin@prioritynetworks.. AIST Product ID: 2000-ETL-198715-01, H14PRO-049 Copyright (c) 1994-2000 Yutaka Sato and ETL,AIST,MITI Copyright (c) 2001-2003 National Institute of Advanced Industrial Science and Technology (AIST) 12/04 18:08:59.07 [7980] 0+0: PORT= 8686/8 (33,238) 12/04 18:08:59.07 [7980] 0+0: OWNER=root => OWNER=root/root(root/root) 12/04 18:08:59.07 [7980] 0+0: SPECIALIST: httpam 12/04 18:08:59.07 [7980] 0+0: ##DeleGate/6.X: MIMECONV=thru is set by default. MIMECONV="" will make it compatible with former versions. 12/04 18:08:59.07 [7980] 0+0: dirfopen(/var/spool/delegate-root/log/errors.log,a): 817c670 [9] 12/04 18:08:59.07 [7980] 0+0: #### newRoute[NOTIFYPLTFM] 0/16 12/04 18:08:59.07 [7980] 0+0: [0] NOTIFYPLTFM=://:0-_-{}:{} 12/04 18:08:59.08 [7980] 0+0: #### newRoute[REMITTABLE] 0/16 12/04 18:08:59.08 [7980] 0+0: [0] REMITTABLE={}{pam,httpam}:{*}:{*} 12/04 18:08:59.08 [7980] 0+0: REMITTABLE = pam,httpam 12/04 18:08:59.08 [7980] 0+0: #### newRoute[RELIABLE] 0/16 12/04 18:08:59.08 [7980] 0+0: [0] RELIABLE=://:0-_-{}:{} 12/04 18:08:59.08 [7980] 0+0: #### newRoute[CMAP] 0/16 12/04 18:08:59.08 [7980] 0+0: [0] CMAP={delegate,nojava}relay{*}:{*}:{.localnet} 12/04 18:08:59.08 [7980] 0+0: #### newRoute[CMAP] 1/16 12/04 18:08:59.08 [7980] 0+0: [1] CMAP={proxy}relay{*}:{*}:{*} 12/04 18:08:59.08 [7980] 0+0: ### [0] gzip 0 12/04 18:08:59.08 [7980] 0+0: ### [1] /var/log/gzip 0 12/04 18:08:59.08 [7980] 0+0: ### [2] /var/spool/delegate-root/lib/gzip 0 12/04 18:08:59.08 [7980] 0+0: ### [3] gzip 0 12/04 18:08:59.09 [7980] 0+0: ### [0] /sbin/gzip 0 12/04 18:08:59.09 [7980] 0+0: ### [1] /usr/sbin/gzip 0 12/04 18:08:59.09 [7980] 0+0: ### [2] /bin/gzip 8186f58 12/04 18:08:59.09 [7980] 0+0: PATH: gzip -> /bin/gzip 12/04 18:08:59.09 [7980] 0+0: #### gzip = [/bin/gzip]gzip 12/04 18:08:59.09 [7980] 0+0: #### gunzip = [/bin/gzip]gzip -d 12/04 18:08:59.09 [7980] 0+0: ADMIN=sysadmin@prioritynetworks.. protocol=httpam(specialist) -delegated[7980]- WARNING! ADMIN="your_mail_address" should be specified. -delegated[7980]- INFO: using ADMIN=sysadmin@prioritynetworks.. given at compile time. 12/04 18:08:59.09 [7980] 0+0: ##DeleGate/6.X: created directory/file will be non-sharable. SHARE="" will make it compatible with former versions. 12/04 18:08:59.09 [7980] 0+0: #### CACHE DISABLED #### Cache directory seems not exist: /var/spool/delegate-root/cache 12/04 18:08:59.09 [7980] 0+0: MOUNT[0]X[2] /-/builtin/icons/* = default 12/04 18:08:59.09 [7980] 0+0: MOUNT[1]X[3] /-/* = forbidden,from=!.RELIABLE,default 12/04 18:08:59.10 [7980] 0+0: MOUNT[2]X[0] /-* = default 12/04 18:08:59.10 [7980] 0+0: MOUNT[3]X[1] /=* = default 12/04 18:08:59.10 [7980] 0+0: dirfopen(/var/spool/delegate-root/act/pid/8686,w+): 8187258 [10] 12/04 18:08:59.10 [7980] 0+0: env[28] LIBPATH=.;/var/log;/var/spool/delegate-root/lib;. 12/04 18:08:59.10 [7980] 0+0: env[30] RESOLV=cache,file,dns 12/04 18:08:59.10 [7980] 0+0: arg[3] SERVER=httpam 12/04 18:08:59.10 [7980] 0+0: arg[4] OWNER=root 12/04 18:08:59.10 [7980] 0+0: arg[5] RELIABLE=* 12/04 18:08:59.10 [7980] 0+0: TMPFILE(setLastModified) = (12) /var/spool/delegate-root/tmp/dg7980.2.1070579339 12/04 18:08:59.10 [7980] 0+0: >>>TMPFILE(setLastModified)>>>8187258[12] 12/04 18:08:59.11 [7980] 0+0: dirfopen(/var/spool/delegate-root/etc/params/8686,r): 8187418 [13] 12/04 18:08:59.11 [7980] 0+0: DELEGATE_Modified[0]: 3fcfbbfb 12/04 18:08:59.11 [7980] 0+0: Accept-LOCK: 0 12/04 18:08:59.11 [7980] 0+0: --INITIALIZATION DONE: 8.7.7 on Linux/2.4.19-46um-- 12/04 18:09:16.28 [7980] 0+0: AcceptByMain: TIMEOUT(children=0, timeout=15) 12/04 18:09:24.65 [7980] 0+0: ## accept([8]:8686)=14 12/04 18:09:24.67 [7983] 1+0: -- Fork(OnetimeServer): 7980 -> 7983 12/04 18:09:24.68 [7983] 1+0: -- SockHost: [127.0.0.1] localhost:8686 12/04 18:09:24.68 [7983] 1+0: SPECIALIST: httpam 12/04 18:09:24.68 [7983] 1+0: #### newRoute[USERIDENT] 0/16 12/04 18:09:24.68 [7983] 1+0: [0] USERIDENT=://:0-_-{}:{} 12/04 18:09:24.68 [7983] 1+0: dirfopen(/var/spool/delegate-root/act/clients/20/127.0.0.1:localhost,r+): 0 [-1] 12/04 18:09:24.69 [7983] 1+0: dirfopen(/var/spool/delegate-root/act/clients/20/127.0.0.1:localhost,w+): 8187418 [8] 12/04 18:09:24.69 [7983] 1+0: (0) accepted [44] -@[127.0.0.1]localhost:1040 (0.037s)(1) 12/04 18:09:24.69 [7983] 1+0: dirfopen(/var/spool/delegate-root/adm/shutout/127.0.0.1,r): 0 [-1] 12/04 18:09:24.69 [7983] 1+0: KeepAlive[44] = 1 12/04 18:09:24.69 [7983] 1+0: execGeneralist->execSpecialist 12/04 18:09:24.69 [7983] 1+0: PATH: httpam://-:8686!localhost:8686!localhost:1040!anonymous@localhost;1070579364 12/04 18:09:24.69 [7983] 1+0: #### newRoute[REACHABLE] 0/16 12/04 18:09:24.69 [7983] 1+0: [0] REACHABLE=://:0-_-{}:{} 12/04 18:09:24.69 [7983] 1+0: PERMITTED: httpam://- 12/04 18:09:24.70 [7983] 1+0: ## daemonControl(httpam) 12/04 18:09:24.70 [7983] 1+0: BASEURL=http://127.0.0.1:8686 12/04 18:09:24.70 [7983] 1+0: BASEURL= http :// 127.0.0.1 : 8686 12/04 18:09:24.70 [7983] 1+0: ##HHn replaced LF to CRLF: Authorization: Basic dGVzdGVyOmhpdG9zaGk= 12/04 18:09:24.70 [7983] 1+0: HTTP Relay_request_head (67 bytes/3 lines) 12/04 18:09:24.70 [7983] 1+0: Proxy: host=localhost; User-Agent: ; DIRECT 12/04 18:09:24.70 [7983] 1+0: HTTP Relay_request done (67 bytes/3 lines) 12/04 18:09:24.70 [7983] 1+0: *** gethostbyname(127.0.0.1) -> byaddr(4,2) 12/04 18:09:24.70 [7983] 1+0: [2] URL Matched but not for MovedTo[20000]:/-/pam/passwd/auth 12/04 18:09:24.70 [7983] 1+0: [2] URL Matched but not for MovedTo[40000]:/-/pam/passwd/auth 12/04 18:09:24.70 [7983] 1+0: [2] MOUNT ASIS: /- 12/04 18:09:24.71 [7983] 1+0: [2] MOUNT ASIS: /- 12/04 18:09:24.71 [7983] 1+0: Host: localhost:8686 12/04 18:09:24.71 [7983] 1+0: REQUEST - GET /-/pam/passwd/auth HTTP/1.0^M 12/04 18:09:24.71 [7983] 1+0: ImMaster? 0 <http://-:8686> <http://localhost:8686/> 12/04 18:09:24.71 [7983] 1+0: [2] MOUNT ASIS: /- 12/04 18:09:24.71 [7983] 1+0: [2] MOUNT ASIS: /- 12/04 18:09:24.71 [7983] 1+0: REMOTE > GET /-/pam/passwd/auth HTTP/1.0^M 12/04 18:09:24.71 [7983] 1+0: PATH> http://localhost:8686!localhost:8686!localhost:1040!anonymous@localhost;1070579364 12/04 18:09:24.71 [7983] 1+0: REQUEST = [http://localhost:8686/] GET /-/pam/passwd/auth HTTP/1.0^M 12/04 18:09:24.71 [7983] 1+0: checking delegate-internal: self=1 GET /-/pam/passwd/auth HTTP/1.0^M 12/04 18:09:24.71 [7983] 1+0: ERROR: Unknown internal: GET /-/pam/passwd/auth HTTP/1.0^M 12/04 18:09:24.71 [7983] 1+0: Unknown internal: [localhost:8686] /-/pam/passwd/auth 12/04 18:09:24.71 [7983] 1+0: E-U: Unknown: localhost:1040 => GET /-/pam/passwd/auth HTTP/1.0 [http://localhost:8686] 12/04 18:09:24.72 [7983] 1+0: ####LS cannot open /var/spool/delegate-root/act/delay/20/127.0.0.1:localhost 12/04 18:09:24.72 [7983] 1+0: dirfopen(/var/spool/delegate-root/act/errors/unknown/20/127.0.0.1:localhost,r+): 8187d68 [8] 12/04 18:09:24.72 [7983] 1+0: doDelay: clear old errors: count=6,age=15698,delay=60 12/04 18:09:24.72 [7983] 1+0: dirfopen(/var/spool/delegate-root/act/errors/unknown/20/127.0.0.1:localhost,r+): 8187d68 [8] 12/04 18:09:24.72 [7983] 1+0: TMPFILE(NotFound) = (8) /var/spool/delegate-root/tmp/dg7983.3.1070579364 12/04 18:09:24.72 [7983] 1+0: >>>TMPFILE(NotFound)>>>8187db0[8] 12/04 18:09:24.72 [7983] 1+0: [2] MOUNT ASIS: /- 12/04 18:09:24.72 [7983] 1+0: ####[builtin] /-/builtin/mssgs/404-notfound.dhtml 12/04 18:09:24.73 [7983] 1+0: LINGER: [44] 30 8{1,30} 12/04 18:09:24.74 [7983] 1+0/1: LINGER: [44] 30 8{1,30} 12/04 18:09:24.74 [7983] 1+0/1: dirfopen(/var/spool/delegate-root/act/clients/20/127.0.0.1:localhost,r+): 8187db0 [8] 12/04 18:09:24.74 [7983] 1+0/1: disconnected [44] -@[127.0.0.1]localhost:1040 (0.093s)(0) 12/04 18:09:32.23 [7980] 1+0: DeleGate SERVER EXITS: caught SIGINT [2] 12/04 18:09:32.23 [7980] 1+0: Killpg(7980,15) 12/04 18:09:32.27 [7980] 1+0: (0) process [7983] dead 12/04 18:09:32.31 [7980] 1+0: dirfopen(/var/spool/delegate-root/act/pid/8686,r): 8187418 [8] 12/04 18:09:32.31 [7980] 1+0: FINISH. Hmm.... More errors about temp files. And now it's also complaining about "Unknown internal: GET /-/pam/passwd/auth HTTP/1.0". I'm confused. I really believe that I am just missing some important (and probably obvious) command line option to the delegated command. ====================================================================================== And here is the output from the DeleGate proxy process: 12/04 18:09:10.19 [7981] 0+0: PORT> -P80 12/04 18:09:10.20 [7981] 0+0: TMPFILE(new_shared) = (3) /home/delegate/tmp/dg7981.1.1070579350 12/04 18:09:10.20 [7981] 0+0: >>>TMPFILE(new_shared)>>>81894e8[3] 12/04 18:09:10.20 [7981] 0+0: [-] localhost 12/04 18:09:10.20 [7981] 0+0: [-] 127.0.0.1 12/04 18:09:10.20 [7981] 0+0: HOSTS[0]=localhost/127.0.0.1 (PREDEF) 12/04 18:09:10.20 [7981] 0+0: [-] .af-local 12/04 18:09:10.20 [7981] 0+0: [-] 127.0.0.127 12/04 18:09:10.20 [7981] 0+0: HOSTS[1]=.af-local/127.0.0.127 (PREDEF) 12/04 18:09:10.20 [7981] 0+0: scanned HOSTS=localhost/127.0.0.1,.af-local/127.0.0.127 12/04 18:09:10.23 [7981] 0+0: *** GETHOSTBYNAME: arsenic.prioritynetworks.net / 0.00 secs. has_alias:0 12/04 18:09:10.23 [7981] 0+0: HOSTS[2]={arsenic.prioritynetworks.net,arsenic}/128.64.32.108 12/04 18:09:10.23 [7981] 0+0: configuring default RESOLV ... 12/04 18:09:10.23 [7981] 0+0: ... SYS: arsenic -> 128.64.32.108 12/04 18:09:10.27 [7981] 0+0: ... DNS: 128.64.32.108 -> arsenic.prioritynetworks.net 12/04 18:09:10.27 [7981] 0+0: ... DNS available 12/04 18:09:10.27 [7981] 0+0: ... NIS not available (no default domain) 12/04 18:09:10.27 [7981] 0+0: ... export RES_ORDER=CFD 12/04 18:09:10.27 [7981] 0+0: export RESOLV=cache,file,dns (set by default) 12/04 18:09:10.27 [7981] 0+0: setsockbuf[7] in:0->0 out:65535->131072 12/04 18:09:10.27 [7981] 0+0: --INITIALIZATION START: 8.7.7 on Linux/2.4.19-46um-- 12/04 18:09:10.27 [7981] 0+0: SPECIALIST: http 12/04 18:09:10.30 [7981] 0+0: server_open(delegate,:80,listen=20) 12/04 18:09:10.31 [7981] 0+0: listen(8,20) OK. 12/04 18:09:10.31 [7981] 0+0: server_open(delegate,:80) BOUND 12/04 18:09:10.31 [7981] 0+0: ##DeleGate/6.X: DGROOT=/home/delegate is set automatically. DGROOT="" will make it compatible with former versions. 12/04 18:09:10.31 [7981] 0+0: DGROOT=/home/delegate^M 12/04 18:09:10.31 [7981] 0+0: <DeleGate/8.7.7 by ysato AT delegate DOT org> [7981] -P80 READY^M <DeleGate/8.7.7 by ysato AT delegate DOT org> [7981] -P80 READY DGROOT=/home/delegate ADMIN=sysadmin@prioritynetworks.. AIST Product ID: 2000-ETL-198715-01, H14PRO-049 Copyright (c) 1994-2000 Yutaka Sato and ETL,AIST,MITI Copyright (c) 2001-2003 National Institute of Advanced Industrial Science and Technology (AIST) 12/04 18:09:10.31 [7981] 0+0: PORT= 80/8 (0,80) 12/04 18:09:10.32 [7981] 0+0: OWNER=nobody => OWNER=nobody/nogroup(nobody/nogroup) 12/04 18:09:10.32 [7981] 0+0: SPECIALIST: http 12/04 18:09:10.32 [7981] 0+0: ##DeleGate/6.X: MIMECONV=thru is set by default. MIMECONV="" will make it compatible with former versions. 12/04 18:09:10.32 [7981] 0+0: dirfopen(/home/delegate/log/errors.log,a): 818ac88 [9] 12/04 18:09:10.32 [7981] 0+0: #### newRoute[NOTIFYPLTFM] 0/16 12/04 18:09:10.32 [7981] 0+0: [0] NOTIFYPLTFM=://:0-_-{}:{} 12/04 18:09:10.32 [7981] 0+0: #### newRoute[CMAP] 0/16 12/04 18:09:10.32 [7981] 0+0: [0] CMAP={-pam//localhost/passwd}AuthServer{*}:{*}:{*} 12/04 18:09:10.32 [7981] 0+0: #### newRoute[REMITTABLE] 0/16 12/04 18:09:10.33 [7981] 0+0: [0] REMITTABLE={}{http,https/{443,563},gopher,ftp,wais}:{*}:{*} 12/04 18:09:10.33 [7981] 0+0: REMITTABLE = http,https/{443,563},gopher,ftp,wais 12/04 18:09:10.33 [7981] 0+0: #### newRoute[RELIABLE] 0/16 12/04 18:09:10.33 [7981] 0+0: [0] RELIABLE=://:0-_-{}:{} 12/04 18:09:10.33 [7981] 0+0: #### newRoute[CMAP] 1/16 12/04 18:09:10.33 [7981] 0+0: [1] CMAP={delegate,nojava}relay{*}:{*}:{.localnet} 12/04 18:09:10.33 [7981] 0+0: #### newRoute[CMAP] 2/16 12/04 18:09:10.33 [7981] 0+0: [2] CMAP={proxy}relay{*}:{*}:{*} 12/04 18:09:10.33 [7981] 0+0: ### [0] gzip 0 12/04 18:09:10.33 [7981] 0+0: ### [1] /home/delegate/gzip 0 12/04 18:09:10.33 [7981] 0+0: ### [2] /home/delegate/lib/gzip 0 12/04 18:09:10.33 [7981] 0+0: ### [3] gzip 0 12/04 18:09:10.34 [7981] 0+0: ### [0] /sbin/gzip 0 12/04 18:09:10.34 [7981] 0+0: ### [1] /usr/sbin/gzip 0 12/04 18:09:10.34 [7981] 0+0: ### [2] /bin/gzip 8197218 12/04 18:09:10.34 [7981] 0+0: PATH: gzip -> /bin/gzip 12/04 18:09:10.34 [7981] 0+0: #### gzip = [/bin/gzip]gzip 12/04 18:09:10.34 [7981] 0+0: #### gunzip = [/bin/gzip]gzip -d 12/04 18:09:10.34 [7981] 0+0: ADMIN=sysadmin@prioritynetworks.. protocol=http(specialist) -delegated[7981]- WARNING! ADMIN="your_mail_address" should be specified. -delegated[7981]- INFO: using ADMIN=sysadmin@prioritynetworks.. given at compile time. 12/04 18:09:10.34 [7981] 0+0: ##DeleGate/6.X: created directory/file will be non-sharable. SHARE="" will make it compatible with former versions. 12/04 18:09:10.34 [7981] 0+0: #### CACHE DISABLED #### Cache directory seems not exist: /home/delegate/cache 12/04 18:09:10.34 [7981] 0+0: /* http://slashdot.org/* 12/04 18:09:10.35 [7981] 0+0: IGNORE DUPLICATE MOUNT[0] /-* = default 12/04 18:09:10.35 [7981] 0+0: IGNORE DUPLICATE MOUNT[1] /=* = default 12/04 18:09:10.35 [7981] 0+0: MOUNT[0]X[3] /-/builtin/icons/* = default 12/04 18:09:10.35 [7981] 0+0: MOUNT[1]X[4] /-/* = forbidden,from=!.RELIABLE,default 12/04 18:09:10.35 [7981] 0+0: MOUNT[2]X[0] /-* = default 12/04 18:09:10.35 [7981] 0+0: MOUNT[3]X[1] /=* = default 12/04 18:09:10.35 [7981] 0+0: MOUNT[4]X[2] /* http://slashdot.org/* 12/04 18:09:10.35 [7981] 0+0: S[slashdot.org] = UP[]U[]P[] + HP[slashdot.org]H[slashdot.org]P[] 12/04 18:09:10.35 [7981] 0+0: gethostbyname(slashdot.org). 12/04 18:09:10.35 [7981] 0+0: *** gethostbyname(slashdot.org): slashdot.org / 0.00 secs. has_alias:0 12/04 18:09:10.36 [7981] 0+0: HOSTS[3]=slashdot.org/66.35.250.150 12/04 18:09:10.36 [7981] 0+0: MOUNT HOST slashdot.org=66.35.250.150 12/04 18:09:10.36 [7981] 0+0: [4] MOUNT=/ http://slashdot.org[66.35.250.150]:80/ 12/04 18:09:10.38 [7981] 0+0: HOSTS[3]=slashdot.org/66.35.250.150 marked PREDEF 12/04 18:09:10.38 [7981] 0+0: ##DeleGate/6.X: No default private-MASTER. MASTERP="" will make it compatible with former versions. 12/04 18:09:10.38 [7981] 0+0: #### stack size limit = 800000 (000000X) 12/04 18:09:10.38 [7981] 0+0: dirfopen(/home/delegate/act/pid/80,w+): 81a8c90 [10] 12/04 18:09:10.38 [7981] 0+0: Stay open PIDFILE for accept() lock[fd=10] 12/04 18:09:10.38 [7981] 0+0: env[28] LIBPATH=.;/home/delegate;/home/delegate/lib;. 12/04 18:09:10.39 [7981] 0+0: env[30] RESOLV=cache,file,dns 12/04 18:09:10.39 [7981] 0+0: arg[3] SERVER=http 12/04 18:09:10.39 [7981] 0+0: arg[4] MOUNT=/* http://slashdot.org/* 12/04 18:09:10.39 [7981] 0+0: arg[5] AUTHORIZER=-pam//localhost/passwd 12/04 18:09:10.39 [7981] 0+0: arg[6] RELIABLE=* 12/04 18:09:10.39 [7981] 0+0: TMPFILE(setLastModified) = (13) /home/delegate/tmp/dg7981.2.1070579350 12/04 18:09:10.39 [7981] 0+0: >>>TMPFILE(setLastModified)>>>81a8e40[13] 12/04 18:09:10.39 [7981] 0+0: dirfopen(/home/delegate/etc/params/80,r): 81a8fb0 [14] 12/04 18:09:10.39 [7981] 0+0: dirfopen(/home/delegate/etc/params/80,w): 81a8fb0 [14] 12/04 18:09:10.39 [7981] 0+0: DELEGATE_Modified[1]: 3fcfbe96 12/04 18:09:10.40 [7981] 0+0: Accept-LOCK: 0 12/04 18:09:10.40 [7981] 0+0: --INITIALIZATION DONE: 8.7.7 on Linux/2.4.19-46um-- 12/04 18:09:21.18 [7981] 0+0: ## accept([8]:80)=15 12/04 18:09:21.20 [7982] 1+0: -- Fork(SequentialServer): 7981 -> 7982 12/04 18:09:21.21 [7982] 1+1: -- SockHost: [128.64.32.108] arsenic.prioritynetworks.net:80 12/04 18:09:21.23 [7982] 1+1: *** gethostbyaddr(63.239.28.189): 63-239-28-189.prioritynetworks.net / 0.02 secs. has_alias:0 12/04 18:09:21.23 [7982] 1+1: HOSTS[4]=63-239-28-189.prioritynetworks.net/63.239.28.189 12/04 18:09:21.23 [7982] 1+1: SPECIALIST: http 12/04 18:09:21.23 [7982] 1+1: #### newRoute[USERIDENT] 0/16 12/04 18:09:21.23 [7982] 1+1: [0] USERIDENT=://:0-_-{}:{} 12/04 18:09:21.24 [7982] 1+1: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,r+): 0 [-1] 12/04 18:09:21.24 [7982] 1+1: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,w+): 81a9548 [11] 12/04 18:09:21.24 [7982] 1+1: (0) accepted [38] -@[63.239.28.189]63-239-28-189.prioritynetworks.net:38385 (0.055s)(1) 12/04 18:09:21.24 [7982] 1+1: dirfopen(/home/delegate/adm/shutout/63.239.28.189,r): 0 [-1] 12/04 18:09:21.24 [7982] 1+1: KeepAlive[38] = 1 12/04 18:09:21.24 [7982] 1+1: execGeneralist->execSpecialist 12/04 18:09:21.24 [7982] 1+1: PATH: http://-:80!arsenic.prioritynetworks.net:80!63-239-28-189.prioritynetworks.net:38385!anonymous@63-239-28-189.prioritynetworks.net;1070579361 12/04 18:09:21.25 [7982] 1+1: #CEcl prepare ContEncoding:gzip,deflate 12/04 18:09:21.25 [7982] 1+1: IGNORE request: Keep-Alive: 300^M 12/04 18:09:21.25 [7982] 1+1: Accept-Language: en-us,en;q=0.7,ja;q=0.3 12/04 18:09:21.25 [7982] 1+1: HTTP Relay_request_head (424 bytes/9 lines) 12/04 18:09:21.25 [7982] 1+1: Proxy: host=63-239-28-189.prioritynetworks.net; User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630; DIRECT 12/04 18:09:21.25 [7982] 1+1: HCKA:[0] keep-alive; host=63-239-28-189.prioritynetworks.net; (User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630) 12/04 18:09:21.25 [7982] 1+1: HTTP Relay_request done (424 bytes/9 lines) 12/04 18:09:21.25 [7982] 1+1: gethostbyname(-) unknown[0.00s] 12/04 18:09:21.25 [7982] 1+1: HOSTS[5]=-/ 12/04 18:09:21.25 [7982] 1+1: TMPFILE(NULLFP) = (11) /home/delegate/tmp/dg7982.3.1070579361 12/04 18:09:21.25 [7982] 1+1: >>>TMPFILE(NULLFP)>>>81aa6a0[11] 12/04 18:09:21.26 [7982] 1+1: TMPFILE(NotAuthorized) = (15) /home/delegate/tmp/dg7982.4.1070579361 12/04 18:09:21.26 [7982] 1+1: >>>TMPFILE(NotAuthorized)>>>81aa980[15] 12/04 18:09:21.26 [7982] 1+1: *** gethostbyname(63.239.28.189) -> byaddr(4,2) 12/04 18:09:21.26 [7982] 1+1: [2] MOUNT ASIS: /- 12/04 18:09:21.26 [7982] 1+1: ####[builtin] /-/builtin/mssgs/401-unauth.dhtml 12/04 18:09:21.26 [7982] 1+1: ImMaster? 0 <http://-:80> <://:0/> 12/04 18:09:21.26 [7982] 1+1: *** / MOUNTED TO[4] http://slashdot.org/ *** 12/04 18:09:21.26 [7982] 1+1: *** / => http://slashdot.org/ *** 12/04 18:09:21.26 [7982] 1+1: REQUEST +M http://slashdot.org/12/04 18:09:21.26 [7982] 1+1: REALM: </> 12/04 18:09:21.27 [7982] 1+1/1: HCKA:[1] KeepAlive: GET A =>1 12/04 18:09:21.27 [7982] 1+1/1: TCP_NODELAY[38] 0 -> 1 12/04 18:09:21.27 [7982] 1+1/1: TCP_NODELAY[38] 1 -> 0 12/04 18:09:24.63 [7982] 1+1/1: ClosedOnTimeout(0): time=1070579364/1070579391 ppid=7981/7981 pid=7982/7982 12/04 18:09:24.63 [7982] 1+1/1: #CEcl prepare ContEncoding:gzip,deflate 12/04 18:09:24.63 [7982] 1+1/1: IGNORE request: Keep-Alive: 300^M 12/04 18:09:24.63 [7982] 1+1/1: Accept-Language: en-us,en;q=0.7,ja;q=0.3 12/04 18:09:24.64 [7982] 1+1/1: HTTP Relay_request_head (467 bytes/10 lines) 12/04 18:09:24.64 [7982] 1+1/1: Proxy: host=63-239-28-189.prioritynetworks.net; User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630; DIRECT 12/04 18:09:24.64 [7982] 1+1/1: HTTP Relay_request done (467 bytes/10 lines) 12/04 18:09:24.64 [7982] 1+1/1: AUTH_CACHE 0 pam://tester@localhost..:8686 12/04 18:09:24.64 [7982] 1+1/1: expfopen: /home/delegate/adm/authorizer/passwd.localhost.pam/72bd4635de2837c2af85570a5402e244-cache 12/04 18:09:24.64 [7982] 1+1/1: [0.00,-1][AUTH cache-NONE] /home/delegate/adm/authorizer/passwd.localhost.pam/72bd4635de2837c2af85570a5402e244-cache 12/04 18:09:24.64 [7982] 1+1/1: #### newRoute[REACHABLE] 0/16 12/04 18:09:24.64 [7982] 1+1/1: [0] REACHABLE=://:0-_-{}:{} 12/04 18:09:24.64 [7982] 1+1/1: PERMITTED: pam://localhost 12/04 18:09:24.64 [7982] 1+1/1: dirfopen(/home/delegate/act/servers/cc/pam-anonymous-localhost-8686-0,r+): 0 [-1] 12/04 18:09:24.65 [7982] 1+1/1: ConnectToServer connect pam://localhost:8686 12/04 18:09:24.66 [7982] 1+1/1: ConnectToServer connected [8] {127.0.0.1:8686 <- 127.0.0.1:1040} [0.017s] 12/04 18:09:24.66 [7982] 1+1/1: KeepAlive[8] = 1 12/04 18:09:24.67 [7982] 1+1/1: VSocket CNCT/PAM 127.0.0.1:1040 localhost:8686 proto=pam,FSV = 8 12/04 18:09:24.73 [7982] 1+1/1: ## dgpam -a passwd tester = HTTP/1.0 404 Not found^M 12/04 18:09:24.73 [7982] 1+1/1: ## ToS=8 ToSX=-1 12/04 18:09:24.73 [7982] 1+1/1: ## FromS=8 FromSX=-1 12/04 18:09:24.73 [7982] 1+1/1: ## Auth/PAM = -1 <tester:****@-passwd.localhost.pam/8686> 12/04 18:09:24.73 [7982] 1+1/1: AUTHORIZER=-pam//localhost/passwd host=[-passwd.localhost.pam] user=[tester] -> NO 12/04 18:09:24.73 [7982] 1+1/1: TMPFILE(NotAuthorized) = (8) /home/delegate/tmp/dg7982.5.1070579364 12/04 18:09:24.73 [7982] 1+1/1: >>>TMPFILE(NotAuthorized)>>>818aef8[8] 12/04 18:09:24.73 [7982] 1+1/1: ####[reuse] /-/builtin/mssgs/401-unauth.dhtml 12/04 18:09:24.73 [7982] 1+1/1: ImMaster? 0 <http://-:80> <://:0/> 12/04 18:09:24.73 [7982] 1+1/1: *** / MOUNTED TO[4] http://slashdot.org/ *** 12/04 18:09:24.73 [7982] 1+1/1: *** / => http://slashdot.org/ *** 12/04 18:09:24.73 [7982] 1+1/1: REQUEST +M http://slashdot.org/12/04 18:09:24.74 [7982] 1+1/1: REALM: </> 12/04 18:09:24.74 [7982] 1+1/2: HCKA:[2] KeepAlive: GET A =>1 12/04 18:09:24.74 [7982] 1+1/2: TCP_NODELAY[38] 0 -> 1 12/04 18:09:24.74 [7982] 1+1/2: TCP_NODELAY[38] 1 -> 0 12/04 18:09:33.07 [7982] 1+1/2: HTTP CS got sigTERM(2) 12/04 18:09:33.08 [7982] 1+1/2: dirfopen(/home/delegate/act/clients/27/63.239.28.189:63-239-28-189.prioritynetworks.net,r+): 818aef8 [8] 12/04 18:09:33.09 [7981] 1+0: DeleGate SERVER EXITS: caught SIGINT [2] 12/04 18:09:33.09 [7981] 1+0: Killpg(7981,15) 12/04 18:09:33.13 [7981] 1+0: (0) process [7982] dead 12/04 18:09:33.17 [7981] 1+0: dirfopen(/home/delegate/act/pid/80,r): 81a91d0 [8] 12/04 18:09:33.17 [7981] 1+0: FINISH. Any suggestions? Do I need to change some option in a Makefile to enable DeleGate to work with my PAM system on my server? Thank you for your help with this. And thank you for an amazingly useful proxy server! -- High Mobley Network Systems Administrator Priority Networks