[squid-users] Problems with javascript sites and authentication

From: Brad Larden <Brad.Larden@dont-contact.us>
Date: Fri, 8 Oct 2004 11:03:50 +1000

G'day folks,

I have run out of ideas to try here and am hoping that someone out there has had the same problem and found a workaround.

I'm using squid 2.5.stable6 and Samba 3.0.8 compiled with ntlm authentication.

When some of our users access a site which uses ssl and javascript the connection fails and the access log mentions :-

TCP_DENIED/400 1533 USER-AGENT: Mozilla/4.0%20(Windows%20XP%205.1)%20Java/1.4.2_04%0d - NONE/- text/html

There is nothing logged in cache.log.

This message appeared after adding :-
#define RELAXED_HTTP_PARSER 1
to client_side.c and recompiling.

The error prior to this was

TCP_DENIED/400 1840 NONE error:unsupported-request-method - NONE/- text/html

and in cache.log :-

2004/10/08 07:46:36| parseHttpRequest: Unsupported method 'User-Agent:'
2004/10/08 07:46:36| clientReadRequest: FD 22 Invalid Request

So, my question is, how do I fix this problem ?
Why is it only an issue when authentication is turned on under squid ?
If I turn off authentication connections to the offending web page work fine.

It's making squid look rather useless to my boss due to the fact that I pushed to set this up rather than the M$ ISA server but now I cannot enable the authentication scheme which is a necessity.

Regards,
Brad.

Network Administrator
Alphawest Services Pty Ltd
Tel: (61 2) 9682 4992
Fax: (61 2) 9682 5449
Received on Thu Oct 07 2004 - 19:03:53 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Nov 01 2004 - 12:00:01 MST