Hey all,
Using NTLM auth. I just set up sarg and noticed weird usernames.
So, I looked in my squid log, in case they were being parsed weird and I
see this:
1145472531.457 0 127.0.0.1 TCP_CLIENT_REFRESH_MISS/200 4569 GET
http://server44/squid-reports/ TlRMTVNTUAACAAAAB
gAGADAAAAA1gokg7p5ruRq8NyYAAAAAAAAAAFgAWAA2AAAAQwBUAEcAAgAGAEMAVABHAAEAE
ABTAEUAUgBWAEUAUgA0ADQABAAOAGMAdABnAC4AYwBvAG
0AAwAgAHMAZQByAHYAZQByADQANAAuAGMAdABnAC4AYwBvAG0AAAAAAA== NONE/-
text/html
1145472531.487 3 127.0.0.1 TCP_CLIENT_REFRESH_MISS/200 7502 GET
http://server44/squid-reports/images/sarg.png jg
authier NONE/- image/png
That looks like NTLM garbage.. Can anyone confirm what is in my log
file, and if it's expected?
Squid Cache: Version 3.0-PRE3-20060414
Received on Wed Apr 19 2006 - 14:21:52 MDT
This archive was generated by hypermail pre-2.1.9 : Mon May 01 2006 - 12:00:02 MDT