[squid-users] Problem with AUTH

From: Ralf Hildebrandt <Ralf.Hildebrandt@dont-contact.us>
Date: Tue, 20 Nov 2007 13:41:46 +0100

I activated ACL debugging using:
debug_options ALL,1 33,2

Squid 2.6.16-1 logs:

2007/11/20 13:32:52| The request CONNECT lms.fu-berlin.de:443 is DENIED, because it matched 'digestauthentifizierung'
2007/11/20 13:32:52| The reply for CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'
2007/11/20 13:32:52| The request CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'

2007/11/20 13:33:07| The request CONNECT lms.fu-berlin.de:443 is DENIED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:07| The reply for CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:07| The request CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'

2007/11/20 13:33:22| The request CONNECT lms.fu-berlin.de:443 is DENIED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:22| The reply for CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:22| The request CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'

2007/11/20 13:33:40| The request CONNECT lms.fu-berlin.de:443 is DENIED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:40| The reply for CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:41| The request CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'

2007/11/20 13:33:52| The request CONNECT lms.fu-berlin.de:443 is DENIED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:52| The reply for CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'
2007/11/20 13:33:52| The request CONNECT lms.fu-berlin.de:443 is ALLOWED, because it matched 'digestauthentifizierung'

According to my config, there are these lines referring to
"digestauthentifizierung"

# grep -2 digestauthentifizierung squid.conf.WLAN
# Rest erlauben -- aber nur authorisiert!
#
acl digestauthentifizierung proxy_auth REQUIRED
http_access allow digestauthentifizierung
http_access allow CONNECT digestauthentifizierung

#

Why would the request be DENIED and ALLOWED at the same time?

-- 
_________________________________________________
  Charite - Universitätsmedizin Berlin
_________________________________________________
  Ralf Hildebrandt
   i.A. Geschäftsbereich Informationsmanagement
   Campus Benjamin Franklin
   Hindenburgdamm 30 | Berlin
   Tel. +49 30 450 570155 | Fax +49 30 450 570962
   Ralf.Hildebrandt@charite.de
   http://www.charite.de
----- End forwarded message -----
-- 
Ralf Hildebrandt (i.A. des IT-Zentrums)         Ralf.Hildebrandt@charite.de
Charite - Universitätsmedizin Berlin            Tel.  +49 (0)30-450 570-155
Gemeinsame Einrichtung von FU- und HU-Berlin    Fax.  +49 (0)30-450 570-962
IT-Zentrum Standort CBF                    send no mail to plonk@charite.de
Received on Tue Nov 20 2007 - 05:42:00 MST

This archive was generated by hypermail pre-2.1.9 : Sat Dec 01 2007 - 12:00:02 MST