Re: [squid-users] squid_kerb_auth and access.log issue

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 27 Aug 2009 10:54:33 +1200

On Wed, 26 Aug 2009 17:01:34 +0200, Wojciech Dudys <wdudys_at_gmail.com>
wrote:
> Hi,
>
> I have squid 3.0.18 configured to use squid_kerb_auth helper.
>
> When I make a proper HTTP request I see in the access.log:
>
> 1251290049.789 209 X.X.X.X TCP_MISS/200 486 POST
> http://mail.google.com/mail/channel/bind? USER@REALM
> DIRECT/74.125.39.17 text/plain
>
> Ident field is filled with USER_at_REALM. And this is great.
>
> but when I make HTTPS request I see:
>
> 1251289923.734 0 X.X.X.X TCP_DENIED/407 2233 CONNECT
> www.google.com:443 - NONE/- text/html
>
> and there is NONE in the Ident field.
>
> The same situation is when I get TCP_DENIED
>
> 1251289928.638 0 X.X.X.X TCP_DENIED/407 3353 GET
> http://mail.google.com/mail/? - NONE/- text/html
>
>
> Is this a bug?
>

No this means the users browser did not send any authentication credentials
to Squid.
http://wiki.squid-cache.org/Features/Authentication

Amos
Received on Wed Aug 26 2009 - 22:54:36 MDT

This archive was generated by hypermail 2.2.0 : Thu Aug 27 2009 - 12:00:04 MDT