Re: [squid-users] position of Proxy-Authorization header (ICAP)

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 29 May 2009 17:12:03 +1200

yado wrote:
> Sorry,I corrected the question to a concise content.
>
> According to RFC 3507 ,
> ---------------------------------------------------------------------
> Despite the above restrictions on encapsulation, the hop-by-hop
> Proxy-Authenticate and Proxy-Authorization headers MUST be forwarded
> to the ICAP server in the ICAP header section (not the encapsulated
> message).
> ---------------------------------------------------------------------
>
> Is "not the encapsulated message" a part recorded as follows in the ICAP packet of squid?
> ---------------------------------------------------------------------
> REQMOD icap://xxx.xxx.xxx.xxx:1344/ ICAP/1.0
> Host: xxx.xxx.xxx.xxx:1344
> Date: Thu, 16 Apr 2009 01:40:26 GMT
> Proxy-Authorization: Basic YWFhYWE6YmJiYmI=
> Encapsulated: req-hdr=0, null-body=809
> Allow: 204
> ---------------------------------------------------------------------
>
>
> Is "the encapsulated message" a part recorded as follows in the ICAP packet of squid?
> ---------------------------------------------------------------------
> GET http://yyy.yyy.com/ HTTP/1.1
> Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, \
> application/x-shockwave-flash, application/vnd.ms-excel, \
> application/vnd.ms-powerpoint, application/msword, application/xaml+xml, \
> application/vnd.ms-xpsdocument, application/x-ms-xbap, application/x-ms-application, \
> */*
> Accept-Language: ja
> UA-CPU: x86
> Accept-Encoding: gzip, deflate
> User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; .NET CLR \
> 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; .NET CLR 3.0.04506.30)
> Host: yyy.yyy.com
> Proxy-Connection: Keep-Alive
> Cookie: PREF=ID=723b4cbbf7ba804a:TB=4:TM=1239790695:LM=1239790695:S=6AZwgsV; \
> NID=21=VKAhwqrfNBEmPHnPv6gcVUnj3S9u51nIZhe2
> ---------------------------------------------------------------------
>
> Thanks,
>
> --------------------------------------
> Power up the Internet with Yahoo! Toolbar.
> http://pr.mail.yahoo.co.jp/toolbar/

My reading of that RFC and the squid code + change indicates you are
correct. Please make sure this is filed as a bug. The people who know
ICAP well enough to fix this are a bit busy at present and we don't want
to loose your info.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE15
   Current Beta Squid 3.1.0.8 or 3.0.STABLE16-RC1
Received on Fri May 29 2009 - 05:12:36 MDT

This archive was generated by hypermail 2.2.0 : Fri May 29 2009 - 12:00:02 MDT