[squid-users] Log Problem with squid, ntlm-Auth

From: Philip Asprion <philip_at_asprion.org>
Date: Fri, 12 Dec 2008 14:50:46 +0100

Hi All,

I've set up a squid Installation (debian 4.0, squid3) with ntlm_authentication.

Now when I browse the logfiles there seems to be a little Problem with the assignment between the users and the requests.
There are some requests from an IP-Adress with User A and requests from another IP and a different User.
But a few lines later both IPs have the same User, which imho should be impossible.

e.g.

12/Dec/2008 13:24:43 xxx.xxx.xxx.97 200 1290 GET http://somedomain.tld USER_A TCP_HIT -
12/Dec/2008 13:24:43 xxx.xxx.xxx.97 200 663 GET http://somedomain.tld USER_A TCP_MISS -
12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://otherdomain.tld USER_B TCP_MISS -
12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://someotherdomain.tld USER_A TCP_MISS -
12/Dec/2008 13:24:48 xxx.xxx.xxx.97 200 716 GET http://yetanotherdomain.tld USER_A TCP_MISS -
12/Dec/2008 13:24:48 xxx.xxx.xxx.97 304 243 GET http://yetanotherdomain.tld USER_B TCP_IMS_HIT -
12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://2otherdomain.tld USER_B TCP_MISS -

xxx.xxx.xxx.97: Should be USER_A
xxx.xxx.xxx.109: Should be USER_B

Any idea what is going on there?

Greets
Philip
Received on Fri Dec 12 2008 - 13:51:09 MST

This archive was generated by hypermail 2.2.0 : Fri Dec 12 2008 - 12:00:06 MST