RE: [squid-users] problem accessing a certain website using 2.5.STABLEx

Thanks for the reply Chris.

From squid FAQ, noticed that NTLM is only supported in
reverse proxy/accelerator mode.

Some more info :
http://www.cgisecurity.com/lib/ntlmhttp.shtml mentions
that not all proxy honours NTLM, but some do. That is
why my Netcaches are able to handle NTLM.

My questions:

1) But it would be most strange that squid on version
2.4 could serve up the pop-up auth box while version
2.5 cannot.

2) Besides suggesting Basic authentication or Digest
authentication for the web site, is there any
workaround on squid side? This is because we are an
ISP and have no control over the webserver concerned.

Any help would be most appreciated. Thanks.

Regards,
Tay

--- Chris Robertson <crobertson@gci.com> wrote:

> > -----Original Message-----
> > From: Tay Teck Wee
> [mailto:wolfpacks01@yahoo.com.sg]
> > Sent: Wednesday, August 10, 2005 10:11 PM
> > To: squid-users@squid-cache.org
> > Subject: [squid-users] problem accessing a certain
> website using
> > 2.5.STABLEx
> >
> >
> > Dear all,
> >
> > the squid boxes I administer are having a problem
> with
> > a particular website
> > http://nbloan.nus.edu.sg/nbloan/makeappt.aspx
> >
> > Pointing the browser to my squid boxes running
> > 2.5.STABLE7 and 2.5.STABLE10, unable to view a
> pop-up
> > box upon accessing the site.
> >
> > Squid Cache: Version 2.5.STABLE7
> > configure options:
> > --prefix=/usr/local/squid-2.5.STABLE7
> > --enable-removal-policies=heap
> > --enable-xmalloc-statistics --enable-underscores
> > --enable-async-io --enable-snmp
> --enable-smartfilter
> >
> > Squid Cache: Version 2.5.STABLE10-20050725
> > configure options:
> > --prefix=/usr/local/squid-2.5.STABLE10-20050725
> > --enable-removal-policies=heap
> > --enable-xmalloc-statistics --enable-underscores
> > --enable-async-io --enable-snmp
> >
> > But pointing to my other squid boxes running
> > 2.4.STABLE7, able to see the pop-up box(which is
> > correct).
> > --prefix=/usr/local/squid --enable-dlmalloc
> > --enable-removal-policies=heap
> > --enable-storeio=diskd,ufs --enable-underscores
> > Same results for my Netcache proxy-caches.
> >
> > Below are the access logs from all the squid
> boxes.
> > Only difference is that for squid 2.4 version, the
> > pop-up box will appear after the first access
> entry.
> > The second access entry will appear after I click
> > cancel in the pop-up box. For squid version 2.5
> both
> > entries will appear without pause since there is
> no
> > pop-up boxes. BTW the second entry is the
> HTTP401.2
> > error page served by the IIS webserver.
> > 1123739900.877 224 165.21.88.31 TCP_MISS/401
> 4679
> > GET http://nbloan.nus.edu.sg/nbloan/makeappt.aspx
> -
> > DIRECT/137.132.114.92 text/html ALLOW
> > 1123739980.527 581 165.21.88.31 TCP_MISS/404
> 4232
> > GET http://nbloan.nus.edu.sg/favicon.ico -
> > DIRECT/137.132.114.92 text/html ALLOW
> >
> > Please help. Please let me know if there is a need
> to
> > provide more info. Thanks.
> >
> > Regards,
> > Tay
> >
>
> GET /nbloan/makeappt.aspx HTTP/1.1
> Host: nbloan.nus.edu.sg
> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0;
> en-US; rv:1.7.7) Gecko/20050414
> Accept:
>
application/x-shockwave-flash,text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,image/jpeg,image/gif;q=0.2,*/*;q=0.1
> Accept-Language: en-us,en;q=0.5
> Accept-Encoding: gzip,deflate
> Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
> Keep-Alive: 300
> Connection: keep-alive
>
> HTTP/1.x 401 Access Denied
> Server: Microsoft-IIS/5.0
> Date: Thu, 11 Aug 2005 17:45:38 GMT
> WWW-Authenticate: Negotiate
> WWW-Authenticate: NTLM <<<<<<<<<< Here's the
> problem.
> Connection: close
> Content-Length: 4431
> Content-Type: text/html
>
> See
>
http://www.squid-cache.org/mail-archive/squid-users/200406/0542.html
> for details.
>
> Chris
>

        
        
                
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 1GB free storage!
http://sg.whatsnew.mail.yahoo.com
Received on Fri Aug 12 2005 - 05:52:12 MDT