Probleme mit der Digest Auth bei Squid

Hallo!

Ich hatte einen Squid Proxy unter Opensuse 12.2 laufen. Vor kurzem habe ich das System mit Opensuse 42 neu aufgesetzt.
Mein Problem besteht jetzt darin, dass ich eine Digest Authentifizierung nutzten möchte.
Die gleiche Authentication hat vorher super funktioniert.

auth_param digest program /usr/sbin/digest_file_auth -c /etc/squid/squiduser.txt

Wenn ich jetzt nach der Neuinstallation mit meinen Userdaten auf den Squid zugreifen will, bekomme ich immer wieder erneut die Passwortabfrage.
Im access.log ist dann ein TCP_DENIED zu sehen:

1452608826.453 0 172.24.104.0 TCP_DENIED/407 4497 GET http://ift.tt/1Q2rWi1 dkleuser HIER_NONE/- text/html
1452608826.558 0 172.24.104.0 TCP_DENIED/407 4548 GET http://wiki.squid-cache.org/wiki/squ...id-bubbles.png user1 HIER_NONE/- text/html
1452608826.632 0 172.24.104.0 TCP_DENIED/407 4508 GET http://ift.tt/1Q2rXCD dkleuser HIER_NONE/- text/html
1452608826.632 0 172.24.104.0 TCP_DENIED/407 4528 GET http://ift.tt/1Q2rWi7 user1 HIER_NONE/- text/html

Der Username und das Passwort stimmt aber definitiv überein.
Die Filerechte stimmen auch.

proxy:/etc/squid # ll squiduser.txt
-rw-r--r-- 1 root root 640 Jan 12 14:37 squiduser.txt

Wenn ich manuell einen Test über /usr/sbin/digest_file_auth -c /etc/squid/squiduser.txt ausführe, dann bekomme ich auch den korrekten Passworthash zurück geliefert.

Meine squid.conf sieht wie folgt aus:

Code:

---

#
# Recommended minimum configuration:
#
#acl localhost src 127.0.0.1/32 ::1
acl localhost src 127.0.0.1/32

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 10.0.0.0/8    # RFC1918 possible internal network
acl localnet src 172.16.0.0/12  # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
#acl localnet src fc00::/7      # RFC 4193 local private network range
#acl localnet src fe80::/10      # RFC 4291 link-local (directly plugged) machines

# User Authentifizierung
auth_param digest program /usr/sbin/digest_file_auth -c /etc/squid/squiduser.txt
auth_param digest children 5
auth_param digest realm BahnDirekt Proxy (nocache)
auth_param digest nonce_garbage_interval 5 minutes
auth_param digest nonce_max_duration 2 hours
auth_param digest nonce_max_count 50

acl SSL_ports port 443 21 8443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443        # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210        # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280        # http-mgmt
acl Safe_ports port 488        # gss-http
acl Safe_ports port 591        # filemaker
acl Safe_ports port 777        # multiling http
acl Safe_ports port 182
acl CONNECT method CONNECT

#
# Recommended minimum Access Permission configuration:
#
# Deny requests to certain unsafe ports
http_access deny !Safe_ports

# Deny CONNECT to other than secure SSL ports
http_access deny CONNECT !SSL_ports

# Only allow cachemgr access from localhost
http_access allow localhost manager
http_access deny manager

# allow icq
#acl icq dstdomain .icq.net
acl icq dstdomain .icq.com
acl icq2 dstdomain .icq.net
http_access allow icq
http_access allow icq2

# allow dropbox
acl dropbox dstdomain .dropbox.com
http_access allow dropbox

# Allow GTalk
acl GTALK_ports port 5222 5050
acl GTALK_domains dstdomain .google.com
acl GTALK_hosts dstdomain talk.google.com
acl GTALK_methods method CONNECT
http_access allow GTALK_methods GTALK_ports GTALK_hosts
http_access allow GTALK_methods GTALK_ports GTALK_domains

# allow ftp
acl ftp proto ftp
always_direct allow ftp
http_access allow ftp


# We strongly recommend the following be uncommented to protect innocent
# web applications running on the proxy server who think the only
# one who can access services on "localhost" is a local user
#http_access deny to_localhost

#
# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS
#

# Example rule allowing access from your local networks.
# Adapt localnet in the ACL section to list your (internal) IP networks
# from where browsing should be allowed
#http_access allow localnet
acl authenticated_users proxy_auth REQUIRED
http_access deny !authenticated_users
http_access allow localnet
acl mustLogin proxy_auth REQUIRED
http_access deny mustLogin all
#http_access allow authenticated_users
# Allow localhost always proxy functionality
http_access allow localhost

# And finally deny all other access to this proxy
http_access deny all

# Squid normally listens to port 3128
http_port 3128

# Uncomment and adjust the following to add a disk cache directory.
#cache_dir aufs /var/cache/squid 100 16 256

# Leave coredumps in the first cache dir
coredump_dir /var/cache/squid

#
# Add any of your own refresh_pattern entries above these.
#
refresh_pattern ^ftp:          1440    20%    10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0    0%      0
refresh_pattern .              0      20%    4320

# Logfiles
access_log none
#access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
#emulate_httpd_log on

# in Logfiles das letzte Oktett ausblenden
client_netmask 255.255.255.0

visible_hostname proxy

# forwarded_for header loeschen
#forwarded_for delete

# kein Cache:
cache deny all

---

Hat jemand eine Idee woran das liegen kann?

Danke und Gruss