Re: [squid-users] Acceleration & authentication

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 9 Dec 2002 10:48:41 +0100 (CET)

Only if you are using a redirect_program helper.

What is related is http_accel_host. Should be set to the hostname visible
to the client and your Squid needs to be configured to know that the IP
address of this is your backend server.

Regards
Henrik

On Mon, 9 Dec 2002, Rob van Oostveen wrote:

> Henrik,
>
> Can it be possible that "redirect_rewrites_host_header" has
> anything to do with this ? I tried to enable it, but got no
> results from it either.
>
> I investigated some more and it looks like Squid is sending
> the original url to the client, which in turn, tries to connect
> to the original host. The latter is not possible due to a
> firewall. So, this is the situation ;
>
> CLIENT <-http-> SQUID <-http-> IIS
>
> This explanes the time out I get. The client can't connect to
> the original IIS host. Weird..
>
> Rob
>
> > Henrik,
> >
> > These two lines are always logged when I do a request at Squid.
> > Squid does present me a loginbox but it seems to time out after
> > a while.
> >
> > Thx,
> > Rob
> >
> >> On Sunday 08 December 2002 21.58, Rob van Oostveen wrote:
> >>> Hi,
> >>>
> >>> I've seen a few postings regarding this issue. But I haven't seen any
> >>> configuration options about enabling authentication.
> >>> I've Squid runnin in front of IIS 5.0. IIS is running basic
> >>> authentication. When I point an IE directly to IIS the
> >>> authentication works fine, but I point IE to squid I get the
> >>> following two lines in access.log ;
> >>>
> >>> 1039382863.938 106 127.0.0.1 TCP_MISS/401 267 GET http://iis-srv -
> >>> DIRECT/172.16.1.1 text/html
> >>> 1039382869.470 237 127.0.0.1 TCP_MISS/302 353 GET http://iis-srv -
> >>> DIRECT/172.16.1.1 text/html
> >>
> >> Looks just fine. The first request was denied by your IIS server as
> >> the user was not yet authenticated. The second was allowed and
> >> resulted in a redirection to some other URL.
> >>
> >> Regards
> >> Henrik
>
>
>
Received on Mon Dec 09 2002 - 02:48:49 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:55 MST