[squid-users] Squid + Trendmicro

From: Luis Daniel Lucio Quiroz <luis.daniel.lucio_at_gmail.com>
Date: Sun, 6 Sep 2009 23:33:03 -0500

Hi all,

Well, I have a really big problem, We have deployed a Squid with digest auth
+ LDAP, it was work perfectly but other department has installed a Trendmicro
antivirii solution.

Well the problem is that when trendmicro cliend ask squid to access an url, it
fails in first acl related with auth.

My log is this:
Request:
2009/09/05 23:56:30.829| parseHttpRequest: Request Header is
Host: licenseupdate.trendmicro.com:80
User-Agent: Mozilla/4.0 (compatible;MSIE 5.0; Windows 98)
Accept: */*
Pragma: no-cache
Cache-Control: no-cache,no-store
Proxy-Authorization: Digest username="avedstrend", realm="XXX",
nonce="/kCjSgAAAAB4/JcCAAAAAKLZuWMAAAAA", uri
="http://licenseupdate.trendmicro.com:80/ollu/license_update.aspx?Protocol_version=1&AC=OSVMX49VN7GTUMQ8QYQAX
SGJ72QENXK&Product_Code=OS&AP_Name=OC&OS=WW&Language=E&Product_Version=R3CnAGQAyAA",
response="5bd515897ca2f1
84b196eae2fafc654a"
Proxy-Connection: Keep-Alive
Connection: Close

Acl who fails:
2009/09/05 23:56:30.832| ACLChecklist::preCheck: 0x146e1b0 checking
'http_access deny !plUexception !plU'
2009/09/05 23:56:30.832| ACLList::matches: checking !plUexception
2009/09/05 23:56:30.832| ACL::checklistMatches: checking 'plUexception'
2009/09/05 23:56:30.832| authenticateAuthenticate: no connection
authentication type
2009/09/05 23:56:30.832| AuthUserRequest::AuthUserRequest: initialised request
0x189cc30
2009/09/05 23:56:30.832| authenticateValidateUser: Validated Auth_user request
'0x189cc30'.
2009/09/05 23:56:30.832| authenticateValidateUser: Validated Auth_user request
'0x189cc30'.
FATAL: Received Segment Violation...dying.

As you see plUexception is failling , this acl is declared as next:

plUexception acl auth user1

I wonder if anyone knows how to fix it.

I was thinking on adding an acl in witch non auth is involved but I'm not very
sure because enterprise policies.

TIA.

LD
Received on Mon Sep 07 2009 - 04:33:19 MDT

This archive was generated by hypermail 2.2.0 : Mon Sep 07 2009 - 12:00:02 MDT