Re: [squid-users] NTLM auth

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 11 Dec 2001 10:02:47 +0100

Nothing wrong. It is how things work.

The first two requests on an NTLM-auth connetion always fails with
"proxy authorization required".

For some details on why, see http://devel.squid-cache.org/ntlm/

If you received any sign of these "proxy authorization required" deials
in your browser then something is wrong.

Regards
Henrik

Jack wrote:
>
> Hello all,
> I am using NTLM for authentication.
> I allowd user from mydomain.com.
>
> Access.log shows:
> 1008050024.994 2 172.16.1.145 TCP_DENIED/407 1270 GET
> http://www.google.com/ - NONE/- text/html
> 1008050025.150 2 172.16.1.145 TCP_DENIED/407 1344 GET
> http://www.google.com/ - NONE/- text/html
> 1008050025.165 14 172.16.1.145 TCP_DENIED/407 1270 GET
> http://www.google.com/ - NONE/- text/html
> 1008050035.233 31 172.16.1.145 TCP_DENIED/407 1344 GET
> http://www.google.com/ - NONE/- text/html
> 1008050037.533 1 172.16.1.145 TCP_DENIED/407 1315 GET
> http://www.google.com/ logos/nobel.gif - NONE/- text/html
> 1008050037.667 2 172.16.1.145 TCP_DENIED/407 1389 GET
> http://www.google.com/ logos/nobel.gif - NONE/- text/html
> 1008050038.075 2843 172.16.1.145 TCP_MISS/200 3413 GET
> http://www.google.com/ mydomain\jack DIRECT/216.239.37.101 text/html
> 1008050038.697 620 172.16.1.145 TCP_REFRESH_HIT/200 330 GET
> http://www.google.com/images/cleardot.gif mydomain\jack
> DIRECT/216.239.37.101 image/gif
> 1008050038.873 1205 172.16.1.145 TCP_REFRESH_HIT/200 10916 GET
> http://www.google.com/logos/nobel.gif mydomain\jack DIRECT/216.239.37.101
> image/gif
>
> First it denys and then it allows.
> Is there any worng in my configuration?
>
> Thanks
> Jack
>
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
Received on Tue Dec 11 2001 - 02:03:02 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:18 MST