Re: [squid-users] Re: Windows 7 + Firefox + Squid + Kerberos

From: Allan Carvalho <allanc_at_outlook.com>
Date: Fri, 25 Oct 2013 08:23:21 -0200

Hi Markus,

Thanks for the reply, Wireshark shows me de negotiate exchange done
correctly (GSS-API > Kerberos > Ticket > Realm > Server name), in both
(IE and Firefox), suddenly, a package shows the basic authentication
(Firefox), but i did not recognize why, the only difference I found was
in the field Cookie.
IE: Cookie: __utma=(...); __utmz=(...); EZCLIENT=(...)
Firefox: Cookie: EZCLIENT=(...)

Firefox doesn't have the __utma and __utmz, would that be the problem?

Regards
Allan Carvalho

Em 24/10/2013 19:02, Markus Moeller escreveu:
> Hi Allan,
>
> Can you take a capture of the traffic from your client to squid with
> wireshark ? Look at port 3128 (squid proxy port) traffic and in the
> details you can see the negotiate exchange. Can you compare what you
> see with IE and firefox ? Wireshark allows you to expand into the
> Negotiate details where you should see some unencrypted details (e.g.
> HTTP/squidsrv.example.com)
>
> They should look the same for IE and Firefox.
>
> Regards
> Markus
Received on Fri Oct 25 2013 - 10:23:49 MDT

This archive was generated by hypermail 2.2.0 : Fri Oct 25 2013 - 12:00:26 MDT