RE: [squid-users] THE LAST BIG HELP! ------------> IMPORTANT DET AIL

This occur only when I use the transparent proxy feature ... if I enable my
proxy in the browser configuration I only need to authenticate one time ...
but if I disable the proxy, the traffic is redirected by the wccp and the
proxy ask me for a user/password at every time that I want to see a new web
...

Regards!

_________________________________________
Sebastián Arias
Infraestructure & Technologies
AT&T Latín América, Argentina
Phone: [5411]5288-0524 - Fax: [5411]5288-0408

-----Mensaje original-----
De: Arias, Sebastian Alejandro - (Ext Arg)
Enviado el: Viernes, 29 de Agosto de 2003 04:16 p.m.
Para: 'Henrik Nordstrom'; Arias, Sebastian Alejandro - (Ext Arg)
CC: 'squid-users@squid-cache.org'
Asunto: RE: [squid-users] THE LAST BIG HELP!

Yes, I created a script named auth.sh with the entire command options and
wrote in the squid configuration the following sentence: auth_param basic
program /auth/auth.sh, after this the auth works fine! ... Thanks! ....

But know I have the same problem that Christoph Haas

# First time ...

1062176436.001 18 10.54.8.12 TCP_DENIED/401 1713 GET
http://www.google.com.ar/search? - NONE/- text/html
Accept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0 (compatible;
MSIE 6.0; Windows NT 5.0)\r\nHost: www.google.com.ar\r\nConnection:
Keep-Alive\r\nCookie:
[HTTP/1.0 401 Unauthorized\r\nServer: squid/2.5.STABLE2\r\nMime-Version:
1.0\r\nDate: Fri, 29 Aug 2003 17:00:36 GMT\r\nContent-Type:
text/html\r\nContent-Length: 1348\r\nExpires: Fri, 29 Aug 2003 17:00:36
GMT\r\nX-Squid-Error: ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: Basic
realm="ATT Cache Authentication"\r\n\r]

# First Auth

1062176555.783 886 10.54.8.12 TCP_MISS/200 4575 GET
http://www.google.com.ar/search? sebastian.arias DIRECT/216.239.37.99
text/html
[Accept:Referer: http://www.google.com.ar/\r\nAccept-Language:
es-ar\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Mozilla/4.0
(compatible; MSIE 6.0; Windows NT 5.0)\r\nHost:
www.google.com.ar\r\nConnection:
Keep-Alive\r\nAuthorization: Basic
c2ViYXN0aWFuLmFyaWFzOlRzdW50enU=\r\nCookie:
[HTTP/1.0 200 OK\r\nConnection: Close\r\nDate: Fri, 29 Aug 2003 16:01:50
GMT\r\nContent-Encoding: gzip\r\nServer: GWS/2.1\r\nContent-Type:
text/html\r\nCache-control: private\r\n\r]

# Again!????? ... he ask me again for a password! ...

1062176572.942 2 10.54.8.12 TCP_DENIED/401 1767 GET
http://salud.terra.com.mx/canales/tv/70/70322.html - NONE/- text/html
[Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword,
application/x-shockwave-flash, */*\r\nReferer:
http://www.google.com.ar/search?q=pergolini&ie=UTF-8&oe=UTF-8&hl=es&meta=\r\
nAccept-Language: es-ar\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\r\nHost:
salud.terra.com.mx\r\nConnection: Keep-Alive\r\n] [HTTP/1.0 401
Unauthorized\r\nServer: squid/2.5.STABLE2\r\nMime-Version: 1.0\r\nDate: Fri,
29 Aug 2003 17:02:52 GMT\r\nContent-Type: text/html\r\nContent-Length:
1402\r\nExpires: Fri, 29 Aug 2003 17:02:52 GMT\r\nX-Squid-Error:
ERR_CACHE_ACCESS_DENIED 0\r\nWWW-Authenticate: Basic realm="ATT Cache
Authentication"\r\n\r]

Would you think about that?

Regards,

_________________________________________
Sebastián Arias
Infraestructure & Technologies
AT&T Latín América, Argentina
Phone: [5411]5288-0524 - Fax: [5411]5288-0408

-----Mensaje original-----
De: Henrik Nordstrom [mailto:hno@squid-cache.org]
Enviado el: Viernes, 29 de Agosto de 2003 12:22 p.m.
Para: Arias, Sebastian ""Alejandro - (Ext Arg)
CC: 'squid-users@squid-cache.org'
Asunto: RE: [squid-users] THE LAST BIG HELP!

fre 2003-08-29 klockan 15.09 skrev Arias, Sebastian Alejandro - (Ext
Arg):

> auth_param basic program /auth/squid_ldap_auth -b
> 'OU=ITS,OU=Sistemas,OU=Cuentas de Usuario,DC=ar,DC=attla,DC=corp' -w
> mypasswd -h 192.168.178.12 -D 'CN=username,OU=ITS,OU=Sistemas,OU=Cuentas
de
> Usuario,DC=ar,DC=attla,DC=corp' -f sAMAccountName=%s

Use doublequotes (") instead of singlequotes (') and it will probably
work better..

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Este mensaje es confidencial. El mismo contiene información reservada 
y que no puede ser difundida. Si usted ha recibido este e-mail 
por error, por favor avísenos inmediatamente vía e-mail y tenga la 
amabilidad de eliminarlo de su sistema; no deberá copiar el mensaje 
ni divulgar su contenido a ninguna persona. Muchas gracias.
 
This message is confidential. It contains information that is privileged and
legally exempt from disclosure. If you have received this e-mail by mistake,
please let us know immediately by e-mail and delete it from your system; 
you should also not copy the message nor disclose its contents to anyone. 
Thank You.