Hi All,
I've set up a squid Installation (debian 4.0, squid3) with ntlm_authentication.
Now when I browse the logfiles there seems to be a little Problem with the assignment between the users and the requests.
There are some requests from an IP-Adress with User A and requests from another IP and a different User.
But a few lines later both IPs have the same User, which imho should be impossible.
e.g.
12/Dec/2008 13:24:43 xxx.xxx.xxx.97 200 1290 GET http://somedomain.tld USER_A TCP_HIT -
12/Dec/2008 13:24:43 xxx.xxx.xxx.97 200 663 GET http://somedomain.tld USER_A TCP_MISS -
12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://otherdomain.tld USER_B TCP_MISS -
12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://someotherdomain.tld USER_A TCP_MISS -
12/Dec/2008 13:24:48 xxx.xxx.xxx.97 200 716 GET http://yetanotherdomain.tld USER_A TCP_MISS -
12/Dec/2008 13:24:48 xxx.xxx.xxx.97 304 243 GET http://yetanotherdomain.tld USER_B TCP_IMS_HIT -
12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://2otherdomain.tld USER_B TCP_MISS -
xxx.xxx.xxx.97: Should be USER_A
xxx.xxx.xxx.109: Should be USER_B
Any idea what is going on there?
Greets
Philip
Received on Fri Dec 12 2008 - 13:51:09 MST
This archive was generated by hypermail 2.2.0 : Fri Dec 12 2008 - 12:00:06 MST