Received: by itdomain002.itdomain.net.au id <01C096D4.F724EF80@itdomain002.itdomain.net.au>; Thu, 15 Feb 2001 09:24:59 +1100 References: <0a3001c09683$9ee40640$1501a8c0@chello.nl> <3A8AE817.1A535E99@hem.passagen.se> Return-Path: MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-OriginalArrivalTime: 14 Feb 2001 22:25:00.0682 (UTC) FILETIME=[F82596A0:01C096D4] X-MimeOLE: Produced By Microsoft Exchange V6.0.4417.0 content-class: urn:content-classes:message Subject: Re: [SQU] Looks like a newbie problem: Date: Thu, 15 Feb 2001 09:31:47 +1100 Message-ID: <017e01c096d5$ec210000$0200a8c0@lifelesswks> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [SQU] Looks like a newbie problem: Thread-Index: AcCW1P1YCrPXR/XXQrGgNoKZrh3f2g== From: "Robert Collins" To: "Henrik Nordstrom" , "Henk-Jan Kloosterman" Cc: Re: [SQU] Looks like a newbie problem:

I believe the correct proxy auth forwarding patch you = and I put together potentially breaks it? (See squid-dev = archives...)

Ahh,

Henk-Jan, could you please rm your cache.log, up your = debug level to 29,9 33,6 and run a single request (that produces no = body) and

drop me the resulting cache.log file?

I'll have a look at the SSL branch in light of this = this week (not today though sorry)

Rob


----- Original Message -----
From: "Henrik Nordstrom" = <hno@hem.passagen.se>
To: "Henk-Jan Kloosterman" = <proxy@kloosterman.org>
Cc: <squid-dev@ircache.net>
Sent: Thursday, February 15, 2001 7:18 AM
Subject: Re: [SQU] Looks like a newbie = problem:


> Smells fishy. Quite likely a bug in the = authentication part.
>
> Robert: Any ideas? How does the new = authentication code behave on
> AUTH_ON_ACCELERATION?
>
> /Henrik
>
>
> Henk-Jan Kloosterman wrote:
> >
> > I configured my (2.5 +ssl) squid as = follows:
> >
> > # And finally deny all other access to this = proxy
> > acl net src 150.50.0.0/16 192.168.0.0/16 = 10.30.0.0/16
> > acl secureid proxy_auth REQUIRED
> > http_access allow net
> > http_access allow secureid
> > http_access deny all
> >
> > What I want is:  all "net" = users ar efree to use the proxy (and
> > host-accelrator)
> > ((Yes I just the DEFINES =3D = -DAUTH_ON_ACCELERATION)) option.:)))
> > All other users (secureid) must by = authenticated.
> >
> > I am sure I miss something or doing = something wrong.
> > The users get authenticated: But then. the = requested page does not contain
> > any data!!!
> >
> > If  I make it a complete http_access = allow all.. It works allright!
> >
> > --
> > To unsubscribe, see http://www.squid-c= ache.org/mailing-lists.html
>
>