[squid-users] Problem downloading file from catalog.update.microsoft.com and MS BITS(Background Intelligent Transfer Service)

Hi guys,

I have a problem with site catalog.update.microsoft.com and MS BITS
(Background Intelligent Transfer Service) Squid 3.1.12. Squid 3.2.0.7
seems to work without problems.
Most of my clients use Kerberos authentication and WinXP as client.
Unfortunately, BITS can only use Basic Authentication. Basically, as
far as I figured out, BITS is sending an HEAD-request:

Squid 3.1.12:
HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe
HTTP/1.1
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/6.7
Host: download.windowsupdate.com
Proxy-Connection: Keep-Alive

HTTP/1.0 407 Proxy Authentication Required
Server: squid/3.1.12
Mime-Version: 1.0
Date: Wed, 20 Jul 2011 10:35:24 GMT
Content-Type: text/html
Content-Length: 1702
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: Negotiate
Proxy-Authenticate: Basic realm="Proxy"
X-Cache: MISS from xlsqip03_1
Via: 1.0 xlsqip03_1 (squid/3.1.12)
Connection: keep-alive

After that, the client sends an TCP RST and nothing is happening anymore.

Squid 3.2.0.7
HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe
HTTP/1.1
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/6.7
Host: download.windowsupdate.com
Proxy-Connection: Keep-Alive

HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.2.0.7
Mime-Version: 1.0
Date: Wed, 20 Jul 2011 10:22:49 GMT
Content-Type: text/html
Content-Length: 1701
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: Negotiate
Proxy-Authenticate: Basic realm="Proxy"
X-Cache: MISS from xlsqit01
Via: 1.1 xlsqit01 (squid/3.2.0.7)
Connection: keep-alive

HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe
HTTP/1.1
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/6.7
Host: download.windowsupdate.com
Proxy-Connection: Keep-Alive

HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.2.0.7
Mime-Version: 1.0
Date: Wed, 20 Jul 2011 10:22:56 GMT
Content-Type: text/html
Content-Length: 1701
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: Negotiate
Proxy-Authenticate: Basic realm="Proxy"
X-Cache: MISS from xlsqit01
Via: 1.1 xlsqit01 (squid/3.2.0.7)
Connection: keep-alive

HEAD http://download.windowsupdate.com/msdownload/update/software/updt/2011/06/rootsupd_f54752ec63369522f37e545325519ee434cdf439.exe
HTTP/1.1
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/6.7
Host: download.windowsupdate.com
Proxy-Connection: Keep-Alive
Proxy-Authorization: Basic BASE64USERNAMEANDPASSWORD

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 358304
Content-Type: application/cab
Date: Wed, 20 Jul 2011 10:12:15 GMT
ETag: "80cc56dda02ecc1:0"
Last-Modified: Sun, 19 Jun 2011 16:49:33 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Age: 641
X-Cache: HIT from xlsqit01
Via: 1.1 xlsqit01 (squid/3.2.0.7)
Connection: keep-alive

My question now:
Why is Squid 3.1.12 sending an HTTP/1.0 407 and Squid 3.2.0.7 an
HTTP/1.1 407? I could not find any configuration option which could
explain that behavior and I am not even sure if that's the problem.

thanks and regards
Peter
Received on Mon Jul 25 2011 - 11:35:00 MDT