Re: AW: [squid-users] Problem with ntlm_auth

Rost, Werner wrote:

> "KK" instead of "TT":

Still my error. Ignore the helper for now. The problem is not with the helper
I think..

> After reloading squid access.log shows:
>
> 1031724203.292 31 192.125.128.156 TCP_DENIED/407 1647 GET
> http://www.google.
> de/ - NONE/- text/html [Accept: application/vnd.ms-excel,
> application/msword, ap
> plication/vnd.ms-powerpoint, image/gif, image/x-xbitmap, image/jpeg,
> image/pjpeg
> , */*\r\nAccept-Language: de\r\nAccept-Encoding: gzip,
> deflate\r\nUser-Agent: Mo
> zilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)\r\nHost:
> www.google.de\r\nProxy
> -Connection: Keep-Alive\r\nCookie:
> PREF=ID=372c6af77de3389b:TB=1:LD=de:TM=101491
> 2608:LM=1031058836:S=Kc8DoW7Eaf0\r\n] [HTTP/1.0 407 Proxy Authentication
> Require
> d\r\nServer: squid/2.5.PRE11-20020828\r\nMime-Version: 1.0\r\nDate: Wed, 11
> Sep
> 2002 06:03:23 GMT\r\nContent-Type: text/html\r\nContent-Length:
> 1240\r\nExpires:
> Wed, 11 Sep 2002 06:03:23 GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED
> 0\r\nPr
> oxy-Authenticate: NTLM\r\nProxy-Authenticate: Basic realm="SQUID-Proxy ZF
> Boge B
> onn"\r\n\r]
> #

One of these should always be seen per new TCP connection using NTLM, then
there should be another request with a "Proxy-Authorization: NTLM
xxxxxxxxxx...", resulting in yet another 407 reply having a
"Proxy-Authenticate: NTLM yyyyyyyyyy...", followed by yet another request
with "Proxy-Authorization: NTLM zzzzzzzzz...." resulting in a forwarded
request if the supplied NTLMSSP credentials are accepted by the helper, or
yet another 407 reply if not..

Regards
Henrik
Received on Wed Sep 11 2002 - 09:14:04 MDT