Re: [squid-users] squid using windows seven and

On 22/08/11 17:57, Xavier Magnaudeix wrote:
> Hi list,
>
> When surfing to http://privilege.ft.com/signin/news using
> squid-3.0.STABLE7-4 with windows seven(IE8), I never can see the page when I
> click on register.
> Using Windows XP + iE8 and same proxy, it works.
> Using Firefox on windows seven, I t works too.
>
> Can someone give a try with Seven + IE8 and see if you can get the same
> issue? And maybe see what is going on?
>
> Here come the logs:
>
> 1313683343.451 5 10.34.36.57 TCP_MISS/200 1695 GET
> http://privilege.ft.com/sites/all/themes/ftprivilege/img/header-signin-middl
> e.png csov FIRST_UP_PARENT/127.0.0.1 image/png
> 1313683343.453 5 10.34.36.57 TCP_MISS/200 1591 GET
> http://privilege.ft.com/sites/all/themes/ftprivilege/img/mask-bg.png csov
> FIRST_UP_PARENT/127.0.0.1 image/png
> 1313683343.490 15 10.34.36.57 TCP_MISS/200 475 GET
> http://www.google-analytics.com/__utm.gif? - DIRECT/209.85.146.139 image/gif
> 1313683343.494 1 10.34.36.57 TCP_MISS/200 5391 GET
> http://privilege.ft.com/sites/all/themes/ftprivilege/img/footer-bg.png csov
> FIRST_UP_PARENT/127.0.0.1 image/png
> 1313683343.499 0 10.34.36.57 TCP_DENIED/407 5011 GET
> http://privilege.ft.com/sites/all/themes/ftprivilege/img/deal-submit-button.
> png - NONE/- text/html
> 1313683343.554 4 10.34.36.57 TCP_MISS/200 5364 GET
> http://privilege.ft.com/sites/all/themes/ftprivilege/img/deal-submit-button.
> png csov FIRST_UP_PARENT/127.0.0.1 image/png
> 1313683367.376 28 10.34.36.57 TCP_DENIED/407 3886 CONNECT
> registration.ft.com:443 - NONE/- text/html
> 1313683367.428 0 10.34.36.57 TCP_DENIED/407 4236 CONNECT
> registration.ft.com:443 - NONE/- text/html
> 1313683368.013 214 10.34.36.57 TCP_DENIED/407 4134 GET
> http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsK8Var42Wv2Ct%2BB0CP
> yO0igBZwgQUpe8LEc7AQQOjSmWQSLIc4FctfUcCEFRg9%2Fk0x%2FWn%2Fudlr2CmcNo%3D -
> NONE/- text/html
> 1313683368.067 0 10.34.36.57 TCP_DENIED/407 4484 GET
> http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsK8Var42Wv2Ct%2BB0CP
> yO0igBZwgQUpe8LEc7AQQOjSmWQSLIc4FctfUcCEFRg9%2Fk0x%2FWn%2Fudlr2CmcNo%3D -
> NONE/- text/html
> 1313683368.140 0 10.34.36.57 TCP_DENIED/407 4404 GET
> http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsK8Var42Wv2Ct%2BB0CP
> yO0igBZwgQUpe8LEc7AQQOjSmWQSLIc4FctfUcCEFRg9%2Fk0x%2FWn%2Fudlr2CmcNo%3D -
> NONE/- text/html
> 1313683368.408 174 10.34.36.57 TCP_DENIED/407 3744 GET
> http://svrsecure-g2-crl.verisign.com/SVRSecureG2.crl - NONE/- text/html
> 1313683368.461 0 10.34.36.57 TCP_DENIED/407 4094 GET
> http://svrsecure-g2-crl.verisign.com/SVRSecureG2.crl - NONE/- text/html
> 1313683368.533 0 10.34.36.57 TCP_DENIED/407 4014 GET
> http://svrsecure-g2-crl.verisign.com/SVRSecureG2.crl - NONE/- text/html
> 1313683368.600 1126 10.34.36.57 TCP_MISS/200 3214 CONNECT
> registration.ft.com:443 csov DIRECT/62.25.103.202 -
> 1313683368.629 0 10.34.36.57 TCP_DENIED/407 3886 CONNECT
> registration.ft.com:443 - NONE/- text/html
> 1313683368.684 0 10.34.36.57 TCP_DENIED/407 4236 CONNECT
> registration.ft.com:443 - NONE/- text/html
> 1313683368.811 81 10.34.36.57 TCP_MISS/200 74 CONNECT
> registration.ft.com:443 csov DIRECT/62.25.103.202 –
>
> If I uncheck the proxy settings on Seven/IE8 it goes through, and even when
> I check it again. I seems that if it had worked once without proxy, it’ll
> work forever with the proxy…
>

I spy a bunch of 407 + CONNECT events. Would that happen to be NTLM auth
taking place? There is a keep-alive bug (#3213) in Squid-3 CONNECT
handling that breaks the NTLM handshake.

NP: tis is where I'd normally say upgrade. But I'm still working on
making Windows simply build again :(

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.14
   Beta testers wanted for 3.2.0.10