Re: [squid-users] enabling X-Authenticated-user

From: Brett Lymn <brett.lymn_at_baesystems.com>
Date: Thu, 8 Mar 2012 11:19:07 +1030

On Thu, Mar 08, 2012 at 10:37:01AM +1030, Brett Lymn wrote:
>
> 2) For some unknown (to me) reason the upstream is prompting for auth
> even though the basic auth header is there. It does not do this if I
> have login=*:password but if I set login=PASS the upstream prompts.
>

Scratch this one - the stupid stupid stupid upstream seems to cache the
username/cred pair after the first time it does a ldap lookup and will
reject the authentication if the password. Once I cleared the caches
this went away - when the auth rewrite works this won't be a problem.
It looks like there is a setting on the upstream that will clear the
cached entry if auth fails, why this isn't on by default is a mystery.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."
Received on Thu Mar 08 2012 - 00:49:15 MST

This archive was generated by hypermail 2.2.0 : Thu Mar 08 2012 - 12:00:02 MST