Re: [squid-users] Denied microsoft msn

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sat, 28 Jan 2012 13:38:15 +1300

On 28/01/2012 1:47 a.m., Usuário do Sistema wrote:
> Hello everyone, I don't know why but out of the blue my microsoft msn
> doesn't work more!
>
> my last change in squid rules was to add acls for time. but I have
> done rollback already and there is problem with connection to
> microsoft msn yet. follow the mesage in /var/log/access.log
>
>
> 1327665937.497 206 192.168.30.152 TCP_DENIED/407 1972 POST
> http://gateway.messenger.hotmail.com/gateway/gateway.dll? - NONE/-
> text/html
>
>
> squid version is: squid-2.6.STABLE21-6.el5 on CentOs 5.4
>
>
> I'm using authentication by Active Directory on windows server 2008 R2:
>
> auth_param ntlm program /usr/bin/ntlm_auth becomex/srv-ad1
> --helper-protocol=squid-2.5-ntlmssp
>
> all other urls it's working well. only microsoft msn out of the blue
> it doesn't work!
>
>
> what is ? any tips is welcome.

Take a closer look at that request and possibly enable debugging on the
helper.

By itself this log line is useless, 407 just mean authentication is
required. Login is a handshake exchange and NTLM in particular has a
long series of request+reply involved. The other log lines around this
by the same client showing login process are what matter.

>
>
> I have ever listened rumor about some authentication problems on
> Windows 2008 R2. so...anybody has some tips about issue please tell
> post here.
>
>
> thanks
Received on Sat Jan 28 2012 - 00:38:22 MST

This archive was generated by hypermail 2.2.0 : Sat Jan 28 2012 - 12:00:03 MST