Re: [squid-users] Authentication problem

From: Mark Elsen <mark.elsen@dont-contact.us>
Date: Fri, 10 Feb 2006 18:05:44 +0100

> I am running CentOS 4.1 with squid-2.5.STABLE6-3.4E.5
>
> I am able to go and do as I please, except for one site.
>
> http://usarmy.skillport.com
>
> I am able to get to the site, and do my sign-in, but as the site is
> trying to log me in, I continually get a pop-up from my proxy server
> wanting me to authenticate and I cannot get beyond the authentication. I
> put my information in, and it will come back up after about 15-30
> seconds. From what I can see, it does not recognize the information I
> am putting in. Normally I would see *Doman\*username, but I don't, and
> I am sure this is why I cannot get beyond authentication, but again.
> This is the only site I am having an issue with. Here is what my log
> looks like:
>
>
> 1139498358.467 1 172.16.12.219 TCP_DENIED/407 1741 CONNECT
> usarmy.skillport.com:443 - NONE/- text/html
> 1139498358.490 1 172.16.12.219 TCP_DENIED/407 1740 CONNECT
> usarmy.skillport.com:443 - NONE/- text/html
> 1139498358.499 1 172.16.12.219 TCP_DENIED/407 1740 CONNECT
> usarmy.skillport.com:443 - NONE/- text/html
> 1139498358.505 0 172.16.12.219 TCP_DENIED/407 413 HEAD
> http://usarmy.skillport.com:443/rkusarmy/APPLET/snifferSimple/class.clas
> s - NONE/- text/html
> 1139498358.508 0 172.16.12.219 TCP_DENIED/407 417 HEAD
> http://usarmy.skillport.com:443/rkusarmy/APPLET/snifferSimple/class.clas
> s - NONE/- text/html
>
>

  The site, probably uses the NTLM auth. scheme, which is not proxyable.
  Even MS advices against using NTLM on internet-targeted webservers.

  M.
Received on Fri Feb 10 2006 - 10:05:46 MST

This archive was generated by hypermail pre-2.1.9 : Wed Mar 01 2006 - 12:00:03 MST