Greetings

I use squid 2.5 with basic_auth (ncsa_auth), I found a strange problem
with accessing the server, for examaple, if the username is xyz and
the password is 123xyz333 then the anyone can access the server if
entered the userid specified above along with part of the password
(say 123xyz)!! the server doesnt check for the excact password.

any idea?

TIA.