Re: [squid-users] Windows Media Player 11 and authentication

tor 2007-01-04 klockan 15:12 +0100 skrev apmailist@free.fr:

> I have a problem with Windows Media Player 11 not reading certain streamed
> videos through an authenticated proxy.
> Similar problem occurred with version 9 and 10 of this media player.
> I have found no solution that applies to version 11.

Hmm.. worked quite fine for me when I last tested at a customer site,
but you had to go quite deep into the media player preferences to make
it use the proxy for the various streamed content..

> From the proxy logs, the problem is simple : access denied 407.

Which means "Authentication required, or provided login details was
incorrect".

> Those debug logs are written over and over again, in a cyclic manner :
>
> START OF LOG________________________________
> 2007/01/03 16:50:44| parseHttpRequest: req_hdr = {Accept: */*
> User-Agent: NSPlayer/11.0.5721.5145
> Host: a1111.v173327.c17332.g.vm.akamaistream.net
> X-Accept-Authentication: Negotiate, NTLM, Digest, Basic
> Pragma:
> no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0
> Pragma: packet-pair-experiment=1
> Pragma: pipeline-experiment=1
> Supported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch,
> com.microsoft.wm.predstrm, com.microsoft.wm.startupprofile
> Pragma: xClientGUID={3300AD50-2C39-46c0-AE0A-3485C3F5A29E}
> Proxy-Authorization: basic XXXXXXXXXXXXXXXX
> Connection: Keep-Alive
> Accept-Language: fr-FR, *;q=0.1

Looks fine, assuming the XXXXXX is a valid login&password. Use "echo
XXXXX | openssl base64 -d; echo" to verify

> 2007/01/03 16:50:45| parseHttpRequest: req_hdr = {Accept: */*
> User-Agent: NSPlayer/11.0.5721.5145 WMFSDK/11.0
> Accept-Encoding: gzip, deflate
> Host: a1111.v173327.c17332.g.vm.akamaistream.net
> Proxy-Connection: Keep-Alive

And this won't make it.. no login credentials provided..

> There are 2 different requests made by the player, and one of the 2 forgets to
> send a "Proxy-Authorization", and sends a "Proxy-Connection: Keep-Alive"
> instead.

Proxy-Connection isn't relevant. It should combine both..

> And then the 2nd request is denied.

As it should..

> You notice Basic, written with an uppercase B . ( I reckon squid2.4 to be
> case-sensitive, and squid2.5 not case-sensitive)

I don't remember Squid-2.4 to be case sensitive about the scheme names,
but I may be wrong (many many years ago..). The only case-sensitivity
change I remember is that since Squid-2.5.something we default to handle
basic auth user names in a case insensitive manner..

> Windows Media Player works with some other sites. But not with this one, where
> the video is located on a 3rd party site. I don't fully understand how WMP is
> redirected to the video link.

What happens if you open the video directly from the Akamai CDN
location?

> Do you have any idea ?

Buggy client software.

Regards
Henrik