[squid-users] NTLM passthu
Hi, since upgrade from 3.1.20 to 3.2.1, we are facing a problem regarding access to a IIS server with authentication : the popup asking for credentials keeps poping out and make the browsing impossibe. I observed the same behavior with latest 3.2.2 version (r11676 ). On the contrary, using 3.1.20 and same config, everything is fine. Is this a regression? Shoudl I file a bug? Thanks Alex
Re: [squid-users] NTLM passthu
Alexandre Chappaz wrote, on 11.10.2012 14:45: Is this a regression? Shoudl I file a bug? There already is a bug and a proposed fix http://bugs.squid-cache.org/show_bug.cgi?id=3655 Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center | Austria
Re: [squid-users] NTLM passthu
Yes I have seen this bug and applied the patch right now. with patch applied, behavior is a bit different : after asking for credentials, I get a connexion reset. and from access log : 1349962782.169 9 10.XXX.XXX.XXX TCP_MISS/401 436 GET http://www.si-diamant.fr/ - HIER_DIRECT/94.124.232.64 - 2012/10/11 Wolfgang Breyha wbre...@gmx.net: Alexandre Chappaz wrote, on 11.10.2012 14:45: Is this a regression? Shoudl I file a bug? There already is a bug and a proposed fix http://bugs.squid-cache.org/show_bug.cgi?id=3655 Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center | Austria
Re: [squid-users] NTLM passthu
Alexandre Chappaz wrote, on 11.10.2012 15:42: Yes I have seen this bug and applied the patch right now. with patch applied, behavior is a bit different : after asking for credentials, I get a connexion reset. Did you use 3.2.2 or 3.2.1? My patch is for 3.2.1. Don't know if it still works on 3.2.2. If it doesn't work on 3.2.1 either it's bad because this is not trivial to debug. Maybe you want to comment on my bugreport that my patch doesn't fix it for you. Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center | Austria
Re: [squid-users] NTLM passthu
Applied the patch on both 3.2.1 and 3.2.2 . Same result. I'll post on your bug report. In the meantime, is there some additional info that could help to debug? 2012/10/11 Wolfgang Breyha wbre...@gmx.net: Alexandre Chappaz wrote, on 11.10.2012 15:42: Yes I have seen this bug and applied the patch right now. with patch applied, behavior is a bit different : after asking for credentials, I get a connexion reset. Did you use 3.2.2 or 3.2.1? My patch is for 3.2.1. Don't know if it still works on 3.2.2. If it doesn't work on 3.2.1 either it's bad because this is not trivial to debug. Maybe you want to comment on my bugreport that my patch doesn't fix it for you. Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center | Austria
Re: [squid-users] NTLM passthu
Alexandre Chappaz wrote, on 11.10.2012 15:57: Applied the patch on both 3.2.1 and 3.2.2 . Same result. I'll post on your bug report. In the meantime, is there some additional info that could help to debug? At least I can't help in this matter because my knowledge about squid source code is still very limited. I thought I understood all the stuff about pinning and ntlm/negotiate passthrough. It was enough to fix our troubles, but obviously not to fix yours;-) I currently do not have the spare time to debug any further. Sorry. Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center | Austria
Re: [squid-users] NTLM passthu
Hi, In fact I made a wrong manipulation while appling the patch. When applied correctly, the provided patch does fix the pinning problem and the authentaction to IIS works. thanks Alex 2012/10/11 Wolfgang Breyha wbre...@gmx.net: Alexandre Chappaz wrote, on 11.10.2012 15:57: Applied the patch on both 3.2.1 and 3.2.2 . Same result. I'll post on your bug report. In the meantime, is there some additional info that could help to debug? At least I can't help in this matter because my knowledge about squid source code is still very limited. I thought I understood all the stuff about pinning and ntlm/negotiate passthrough. It was enough to fix our troubles, but obviously not to fix yours;-) I currently do not have the spare time to debug any further. Sorry. Greetings, Wolfgang -- Wolfgang Breyha wbre...@gmx.net | http://www.blafasel.at/ Vienna University Computer Center | Austria
