Re: NTLM passthrough broken in 3.1.3 and higher

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 25 Jan 2011 21:53:59 +0000

On Tue, 25 Jan 2011 13:26:02 -0800, Phil Oester wrote:
> In revision 9957 (Remove HTTP/1.1 sent to clients), NTLM passthrough
> was broken for Outlook clients, which require 1.1 to work properly.
> When receiving 1.0, Outlook closes the connection (which breaks NTLM
> since it requires a continued session). Version 3.1.2 works fine
> for these clients. Note this is likely the cause of bug 3141.
>
> In 2.7, the http_port option 'http11' allowed forcing version 1.1
> to clients. That was removed when 3.1 defaulted to 1.1, but when
> this change was reverted, the http11 option was not added back.
>
> Squid 3.2 latest works fine, since 1.1 is now the default again.
>
> Can we either
>
> a) make 1.1 the default in 3.1 again
> b) add back the 'http11' option

The "http11" option has never been part of squid-3. It was an experiment
in 2.7 to see if sending 1.1 was possible yet. It looked successful so we
made it live in 3.1. But had to cut it out again quickly as you noticed. It
turns out the common browser software all wants to actually use HTTP/1.1
performance features which 3.1 does not support.

Feel free to undo the removal patch for your Squid-3.1 if you find those
problems not to be relevant on your network. Or to use 3.2.

Amos
Received on Tue Jan 25 2011 - 21:54:02 MST

This archive was generated by hypermail 2.2.0 : Sat Jan 29 2011 - 12:00:06 MST