Hi guys, I have a problem with site catalog.update.microsoft.com and MS BITS (Background Intelligent Transfer Service) Squid 3.1.12. Squid 3.2.0.7 seems to work without problems. Most of my clients use Kerberos authentication and WinXP as client. Unfortunately, BITS can only use Basic Authentication. Basically, as far as I figured out, BITS is sending an HEAD-request:
Squid 3.1.12: HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe HTTP/1.1 Accept: */* Accept-Encoding: identity User-Agent: Microsoft BITS/6.7 Host: download.windowsupdate.com Proxy-Connection: Keep-Alive HTTP/1.0 407 Proxy Authentication Required Server: squid/3.1.12 Mime-Version: 1.0 Date: Wed, 20 Jul 2011 10:35:24 GMT Content-Type: text/html Content-Length: 1702 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Negotiate Proxy-Authenticate: Basic realm="Proxy" X-Cache: MISS from xlsqip03_1 Via: 1.0 xlsqip03_1 (squid/3.1.12) Connection: keep-alive After that, the client sends an TCP RST and nothing is happening anymore. Squid 3.2.0.7 HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe HTTP/1.1 Accept: */* Accept-Encoding: identity User-Agent: Microsoft BITS/6.7 Host: download.windowsupdate.com Proxy-Connection: Keep-Alive HTTP/1.1 407 Proxy Authentication Required Server: squid/3.2.0.7 Mime-Version: 1.0 Date: Wed, 20 Jul 2011 10:22:49 GMT Content-Type: text/html Content-Length: 1701 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Negotiate Proxy-Authenticate: Basic realm="Proxy" X-Cache: MISS from xlsqit01 Via: 1.1 xlsqit01 (squid/3.2.0.7) Connection: keep-alive HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe HTTP/1.1 Accept: */* Accept-Encoding: identity User-Agent: Microsoft BITS/6.7 Host: download.windowsupdate.com Proxy-Connection: Keep-Alive HTTP/1.1 407 Proxy Authentication Required Server: squid/3.2.0.7 Mime-Version: 1.0 Date: Wed, 20 Jul 2011 10:22:56 GMT Content-Type: text/html Content-Length: 1701 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Negotiate Proxy-Authenticate: Basic realm="Proxy" X-Cache: MISS from xlsqit01 Via: 1.1 xlsqit01 (squid/3.2.0.7) Connection: keep-alive HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe HTTP/1.1 Accept: */* Accept-Encoding: identity User-Agent: Microsoft BITS/6.7 Host: download.windowsupdate.com Proxy-Connection: Keep-Alive Proxy-Authorization: Basic BASE64USERNAMEANDPASSWORD HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 358304 Content-Type: application/cab Date: Wed, 20 Jul 2011 10:12:15 GMT ETag: "80cc56dda02ecc1:0" Last-Modified: Sun, 19 Jun 2011 16:49:33 GMT Server: Microsoft-IIS/7.5 X-Powered-By: ASP.NET Age: 641 X-Cache: HIT from xlsqit01 Via: 1.1 xlsqit01 (squid/3.2.0.7) Connection: keep-alive My question now: Why is Squid 3.1.12 sending an HTTP/1.0 407 and Squid 3.2.0.7 an HTTP/1.1 407? I could not find any configuration option which could explain that behavior and I am not even sure if that's the problem. thanks and regards Peter
