Hi,
I found that squid does not authenticate the users with the NTLM
scheme when using the CONNECT method.
The problem occurs because the proxy sends a "Proxy-Connection: close"
during the second phase of the NTLM authentication. This may occurs
because the JVM does not send the "Proxy-Connection: Keep-Alive" when
it makes the request to the proxy.
Is there some way to force persistent connections with some clients?
Or at least to force persistent connections with NTLM authentication?
The following data is the request/response that I got:
CONNECT www2.bancobrasil.com.br:443 HTTP/1.1
User-Agent: Mozilla/4.0 (Windows 2000 5.0) Java/1.5.0_03
Host: www2.bancobrasil.com.br
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Proxy-authorization: NTLM
TlRMTVNTUAABAAAAB7IAogUABQAzAAAACwALACgAAAAFAJMIAAAAD0NBTVBPR1JBTkRFTVBERlQ=
HTTP/1.0 407 Proxy Authentication Required
Server: squid/2.5.STABLE9
Mime-Version: 1.0
Date: Tue, 28 Jun 2005 20:40:28 GMT
Content-Type: text/html
Content-Length: 1361
Expires: Tue, 28 Jun 2005 20:40:28 GMT
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Proxy-Authenticate: NTLM
TlRMTVNTUAACAAAAAAAAADAAAAASAgAAZTxCam1EiM0AAAAAAAAAAAAAAAAwAAAA
X-Cache: MISS from bart.mpdft.gov.br
Proxy-Connection: close
-- TIA, Robson PaniagoReceived on Wed Jun 29 2005 - 05:47:58 MDT
This archive was generated by hypermail pre-2.1.9 : Fri Jul 01 2005 - 12:00:03 MDT