[squid-users] Windows Media Player 11 and authentication from apmailist@dont-contact.us on 2007-01-04 (squid-users)

From: <apmailist@dont-contact.us>
Date: Thu, 04 Jan 2007 15:12:47 +0100

Hello,

I have a problem with Windows Media Player 11 not reading certain streamed
videos through an authenticated proxy.
Similar problem occurred with version 9 and 10 of this media player.
I have found no solution that applies to version 11.

Squid is 2.6stable6, using basic authentication. (the problem occurs also using
2.5stable10)

An example for a failing streamed video is :
http://www.vogue.co.uk/Video/player/

Symptom using IE : the area where the video should be embedded stays black . (no
additional authentication asked)
For the test I did the following : try to open the video link with IE.
http://a1111.v173327.c17332.g.vm.akamaistream.net/7/1111/17332/A4893482/condenetuk.download.akamai.com/17332/Vogue/Shows/AW2006/mcqueen-high.wmv
IE opens a separate Windows Media Player.
Windows media player prompts for user and password, 2 times. And then stays in a
"Connecting to media " state.

From the proxy logs, the problem is simple : access denied 407.

Those debug logs are written over and over again, in a cyclic manner :

START OF LOG________________________________
2007/01/03 16:50:44| parseHttpRequest: req_hdr = {Accept: */*
User-Agent: NSPlayer/11.0.5721.5145
Host: a1111.v173327.c17332.g.vm.akamaistream.net
X-Accept-Authentication: Negotiate, NTLM, Digest, Basic
Pragma:
no-cache,rate=1.000,stream-time=0,stream-offset=0:0,packet-num=4294967295,max-duration=0
Pragma: packet-pair-experiment=1
Pragma: pipeline-experiment=1
Supported: com.microsoft.wm.srvppair, com.microsoft.wm.sswitch,
com.microsoft.wm.predstrm, com.microsoft.wm.startupprofile
Pragma: xClientGUID={3300AD50-2C39-46c0-AE0A-3485C3F5A29E}
Proxy-Authorization: basic XXXXXXXXXXXXXXXX
Connection: Keep-Alive
Accept-Language: fr-FR, *;q=0.1

}
2007/01/03 16:50:43| parseHttpRequest: end = {}
2007/01/03 16:50:43| parseHttpRequest: prefix_sz = 727, req_line_sz = 159
2007/01/03 16:50:43| clientSetKeepaliveFlag: http_ver = 1.1
2007/01/03 16:50:43| clientSetKeepaliveFlag: method = GET
/..... edited ...../
2007/01/03 16:50:45| The reply for GET
http://a1111.v173327.c17332.g.vm.akamaistream.net/7/1111/17332/A4893482/condenetuk.download.akamai.com/17332/Vogue/Shows/AW2006/mcqueen-high.wmv
is ALLOWED, because it matched 'all'
/..... edited ...../

2007/01/03 16:50:45| parseHttpRequest: req_hdr = {Accept: */*
User-Agent: NSPlayer/11.0.5721.5145 WMFSDK/11.0
Accept-Encoding: gzip, deflate
Host: a1111.v173327.c17332.g.vm.akamaistream.net
Proxy-Connection: Keep-Alive

}
/..... edited ...../

2007/01/03 16:50:45| aclMatchAclList: checking AUTENT
2007/01/03 16:50:45| aclMatchAcl: checking 'acl AUTENT proxy_auth REQUIRED'
2007/01/03 16:50:45| aclMatchAclList: no match, returning 0
2007/01/03 16:50:45| aclCheck: match found, returning 2
2007/01/03 16:50:45| aclCheckCallback: answer=2
2007/01/03 16:50:45| The request GET
http://a1111.v173327.c17332.g.vm.akamaistream.net/7/1111/17332/A4893482/condenetuk.download.akamai.com/17332/Vogue/Shows/AW2006/mcqueen-high.wmv
is DENIED, because it matched 'AUTENT'

END OF LOG________________________________

I guess there must be some error made by the WMP client.
What I can see :
There are 2 different requests made by the player, and one of the 2 forgets to
send a "Proxy-Authorization", and sends a "Proxy-Connection: Keep-Alive"
instead.
And then the 2nd request is denied.

What do you see ?

Plus, if you compare to the request made by IE :
2007/01/03 16:50:39| parseHttpRequest: req_hdr = {Accept: image/gif,
image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash,
application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword,
*/*
Accept-Language: en-gb,fr;q=0.7,en-us;q=0.3
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Host: a1111.v173327.c17332.g.vm.akamaistream.net
Proxy-Connection: Keep-Alive
Proxy-Authorization: Basic XXXXXXXXXXXXXXXX

}

You notice Basic, written with an uppercase B . ( I reckon squid2.4 to be
case-sensitive, and squid2.5 not case-sensitive)

and another request made by WMP :
2007/01/03 15:55:12| parseHttpRequest: req_hdr = {Accept: */*
User-Agent: Windows-Media-Player/11.0.5721.5145
Referer: http://www.vogue.co.uk/Video/player/
Accept-Encoding: gzip, deflate
Host: www.vogue.co.uk
Proxy-Connection: Keep-Alive
Cookie: ASP.NET_SessionId=xhpood55rxgcbkihi1qp1cfp;
WEBTRENDS_ID=192.168.1.242-4095260992.29830973
Proxy-Authorization: Basic XXXXXXXXXXXXXXXX

}

Windows Media Player works with some other sites. But not with this one, where
the video is located on a 3rd party site. I don't fully understand how WMP is
redirected to the video link.

Do you have any idea ?

BTW, I was able to open the wmv file, going through the proxy with Media Player
Classic.

2007/01/03 17:31:54| parseHttpRequest: req_hdr = {User-Agent: Media Player
Classic
Host: a1111.v173327.c17332.g.vm.akamaistream.net
Accept: */*

}
DENIED

2007/01/03 17:32:08| parseHttpRequest: req_hdr = {Accept: */*
User-Agent: NSPlayer/4.1.0.3936
Host: a1111.v173327.c17332.g.vm.akamaistream.net
Pragma:
no-cache,rate=1.000000,stream-time=0,stream-offset=0:0,request-context=1,max-duration=0
Pragma: xClientGUID={3300AD50-2C39-46c0-AE0A-25EF17AC8EAF}
Proxy-Authorization: Basic XXXXXXXXXXXXXX

}
ACCEPTED

and then for the streamed video

2007/01/03 17:32:13| parseHttpRequest: req_hdr = {Accept: */*
User-Agent: NSPlayer/4.1.0.3936
Host: a1111.v173327.c17332.g.vm.akamaistream.net
Pragma:
no-cache,rate=1.000000,stream-time=0,stream-offset=4294967295:4294967295,request-context=2,max-duration=2147935649
Pragma: xPlayStrm=1
Pragma: xClientGUID={3300AD50-2C39-46c0-AE0A-25EF17AC8EAF}
Pragma: stream-switch-count=2
Pragma: stream-switch-entry=ffff:1:0 ffff:1f:0

}
ACCEPTED

Basically, I'm looking for something to point out to the editor's support, if
the problem is on the media player side.

Thank You,

Andrew
Received on Thu Jan 04 2007 - 07:12:51 MST

This archive was generated by hypermail pre-2.1.9 : Thu Feb 01 2007 - 12:00:00 MST