Re: Squid NTLM work

Hmm.. my copy did return 407 as expected but the Proxy-Authenticate
header only included crap.. Fix committed the the ntlm branch to make
Squid send the all the Proxy-Authenticate headers it can support until
it is known what the client is willing to do on this connection (i.e.
until NTLM authentication has started).

/Henrik

Henrik Nordstrom wrote:
>
> Thanks for the patch. Committed to the CVS sources. If you create
> yourself a SourceForge account then I suppose you can be given write
> access directly.
>
> I for sure does not mind questions about the Squid code. Feel free to
> ask anything you like.
>
> Returning 401 sounds like an error. It must return 407 when running as a
> proxy. 401 is only for web servers.
>
> What triggers the NTLM authentication in the web browser is a 407 reply
> having a "Proxy-Authenticate: NTLM" header when talking to a proxy, or a
> 401 reply and a "WWW-Authenticate: NTLM" header when talking to a origin
> server.
>
> Hmm.. are you sure it is the proxy who returns the 401 reply? What does
> the full headers of the reply look like?
>
> --
> Henrik Nordstrom
> Squid hacker
>
> Tony Gale wrote:
> >
> > I'm just starting on this in earnest. Enclosed is a patch against the
> > CVS version to get it to compile.
> >
> > Andy: are you back from abroad yet?
> >
> > I'm just trying to get my head around the code ATM. The squid code is
> > quite large and complicated, so I hope you don't mind if I ask a few
> > basic questions to start with.
> >
> > 1. In the ntlm notes Henrik placed on sourceforge it says that the
> > server returns a 407 code with a "Proxy-Authenticate: NTLM" header.
> > Mine returns a 401 with a "WWW-Authenticate: NTLM" header. Is there a
> > reason for this discrpancy that you know of?
> >
> > 2. Whats the code path for the header triggering the NTLM auth code?
> > (Do both of the above headers trigger it - it's not working for me
> > ATM).
> >
> > Thanks for any help, please bear with me while I get upto speed.
> >
> > -tony
> >
> > ---
> > E-Mail: Tony Gale <gale@syntax.dera.gov.uk>
> > Beneath this stone lies Murphy,
> > They buried him today,
> > He lived the life of Riley,
> > While Riley was away.
> >
> > The views expressed above are entirely those of the writer
> > and do not represent the views, policy or understanding of
> > any other person or official body.
> >
> > ---------------------------------------------------------------
> >
> > Name: ntlm-diff1.txt
> > Part 1.2 Type: Plain Text (text/plain)
> > Encoding: 7bit
> > Description: ntlm-diff1.txt
Received on Fri Jun 09 2000 - 14:46:14 MDT