Re: [squid-users] Squid deny access to some part of website

From: Leonardo Rodrigues Magalhães <leolistas_at_solutti.com.br>
Date: Mon, 07 Jul 2008 18:05:36 -0300

Leonardo Rodrigues Magalhães escreveu:
>
>
> Alexandre augusto escreveu:
>> Hi guys,
>>
>> On the access.log the Squid show TCP_DENIED entry to some part of
>> website
>>
>> I´m authenticating my users using NTLM and all entry on access.log
>> that DENIED part of site do not show the standard domain\username on
>> log.
>> only "- -"...
>>
>
> This is the EXPECTED behavior for NTLM authentications: 2 (two)
> denied/407 log entries and then the 'allow' hit, some MISS or HIT ....
>
> this is expected and should be FAQqed somewhere.
>

http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication#head-e4803074fbb62b906724838137cc39c8481c1f16

Note that when using NTLM authentication, you will see two
"TCP_DENIED/407" entries in access.log for every request. This is due to
the challenge-response process of NTLM.

-- 
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br
	Minha armadilha de SPAM, NÃO mandem email
	gertrudes_at_solutti.com.br
	My SPAMTRAP, do not email it
Received on Mon Jul 07 2008 - 21:05:48 MDT

This archive was generated by hypermail 2.2.0 : Tue Jul 08 2008 - 12:00:04 MDT