[squid-users] ntlm_auth fails 2/3 times

From: Евгений <goujat_at_gmail.com>
Date: Tue, 12 Aug 2008 16:02:00 +0400

10.0.0.183 - - [12/Aug/2008:12:45:35] "POST http://mail.google.com/mail...
10.0.0.183 - - [12/Aug/2008:12:45:35] "POST http://mail.google.com/mail...
10.0.0.183 - USERNAME [12/Aug/2008:12:45:35] "POST http://mail.google.c...

ICQ disconnects frequently - it says it is not authorized (in logs).

squid.conf

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5

acl CONTROLEE proxy_auth REQUIRED

http_access allow my_department CONTROLEE
http_access deny my_department maxconn
...
http_access deny all

If I set debug_options 29,6, I get in cache.log:

2008/08/12 15:27:45.329| AuthUserRequest::~AuthUserRequest: freeing
request 0x1055698
*********** This I get when ICQ is disconnected (e. g. it receives
"you are not authorized)
2008/08/12 15:27:45.334| authenticateAuthenticate: no connection
authentication type
***********
2008/08/12 15:27:45.334| AuthUser::AuthUser: Initialised auth_user
'0x1051da0' with refcount '0'.
2008/08/12 15:27:45.334| AuthUserRequest::AuthUserRequest: initialised
request 0x1055698
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| authenticateNTLMHandleReply: Need to
challenge the client with a server blob 'TlRMT
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| authenticateValidateUser: Validated Auth_user
request '0x1055698'.
2008/08/12 15:27:45.334| AuthNTLMUserRequest::authenticate: need to
challenge client 'TlRMTVNTUAACAAAADAAMAD
200

I'm pretty tired of that. Please help.
Squid Cache: Version 3.0.STABLE8
configure options: '--prefix=/usr/local/squid'
Received on Tue Aug 12 2008 - 12:02:04 MDT

This archive was generated by hypermail 2.2.0 : Tue Aug 12 2008 - 12:00:03 MDT