On Wed, 2008-10-29 at 09:17 +0100, Cech. Ulrich wrote: > Hi Oleg, > > Thanks for your reply. > Correct, I use the NTLM-support like it is described in the documentation > (with jcifs etc.). And that worked fine for no-SSL-targets. > > Thanks for your help, > Ulrich > >
Ulrich, The version of Squid you are using appears broken. The proxy keeps one sending 'Proxy-Connection: close' which is wrong given the fact that NTLM requires a persistent connection in order to function. See wire log below Oleg ============ [DEBUG] headers - >> CONNECT www.verisign.com:443 <http://www.verisign.com:443> HTTP/1.1 [DEBUG] headers - >> User-Agent: Apache-HttpClient/4.0-beta1 (java 1.4) [DEBUG] headers - << HTTP/1.0 407 Proxy Authentication Required [DEBUG] headers - << Server: squid/2.6.STABLE6-NT [DEBUG] headers - << Date: Wed, 29 Oct 2008 07:36:24 GMT [DEBUG] headers - << Content-Type: text/html [DEBUG] headers - << Content-Length: 1347 [DEBUG] headers - << Expires: Wed, 29 Oct 2008 07:36:24 GMT [DEBUG] headers - << X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 [DEBUG] headers - << Proxy-Authenticate: NTLM [DEBUG] headers - << X-Cache: MISS from s-hqw2k3bd.pmbelz.de [DEBUG] headers - << X-Cache-Lookup: NONE from s-hqw2k3bd.pmbelz.de:3128 [DEBUG] headers - << Via: 1.0 s-hqw2k3bd.pmbelz.de:3128 (squid/2.6.STABLE6-NT) [DEBUG] headers - << Proxy-Connection: close [DEBUG] headers - >> CONNECT www.verisign.com:443 <http://www.verisign.com:443> HTTP/1.1 [DEBUG] headers - >> User-Agent: Apache-HttpClient/4.0-beta1 (java 1.4) [DEBUG] headers - >> Proxy-Authorization: NTLM TlRMTVNTUAABAAAAATIAAAYABgAgAAAABwAHACYAAABQTUJFTFpQQy0xNjM0 [DEBUG] headers - << HTTP/1.0 407 Proxy Authentication Required [DEBUG] headers - << Server: squid/2.6.STABLE6-NT [DEBUG] headers - << Date: Wed, 29 Oct 2008 07:36:24 GMT [DEBUG] headers - << Content-Type: text/html [DEBUG] headers - << Content-Length: 1347 [DEBUG] headers - << Expires: Wed, 29 Oct 2008 07:36:24 GMT [DEBUG] headers - << X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 [DEBUG] headers - << Proxy-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAADgAAAABAgACJxWYyBecHP8AAAAAAAAAAAAAAAA4AAAABQLODgAAAA8= [DEBUG] headers - << X-Cache: MISS from s-hqw2k3bd.pmbelz.de [DEBUG] headers - << X-Cache-Lookup: NONE from s-hqw2k3bd.pmbelz.de:3128 [DEBUG] headers - << Via: 1.0 s-hqw2k3bd.pmbelz.de:3128 (squid/2.6.STABLE6-NT) [DEBUG] headers - << Proxy-Connection: close [DEBUG] headers - >> CONNECT www.verisign.com:443 <http://www.verisign.com:443> HTTP/1.1 [DEBUG] headers - >> User-Agent: Apache-HttpClient/4.0-beta1 (java 1.4) [DEBUG] headers - >> Proxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAAAwADABwAAAACAAIAHwAAAAOAA4AhAAAAAAAAAAAAAAAAQIAAOOOenVD3rqAqXU7pJjbK5QyfrCD58Nj97AldWYk//1QtLyNjRSYH89g7e4f95Vx0lAATQBCAEUATABaAGMAZQBjAGgAUABDAC0AMQA2ADMANAA= [DEBUG] headers - << HTTP/1.0 407 Proxy Authentication Required [DEBUG] headers - << Server: squid/2.6.STABLE6-NT [DEBUG] headers - << Date: Wed, 29 Oct 2008 07:36:24 GMT [DEBUG] headers - << Content-Type: text/html [DEBUG] headers - << Content-Length: 1347 [DEBUG] headers - << Expires: Wed, 29 Oct 2008 07:36:24 GMT [DEBUG] headers - << X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 [DEBUG] headers - << Proxy-Authenticate: NTLM [DEBUG] headers - << X-Cache: MISS from s-hqw2k3bd.pmbelz.de [DEBUG] headers - << X-Cache-Lookup: NONE from s-hqw2k3bd.pmbelz.de:3128 [DEBUG] headers - << Via: 1.0 s-hqw2k3bd.pmbelz.de:3128 (squid/2.6.STABLE6-NT) [DEBUG] headers - << Proxy-Connection: close --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
