Hi All, I've set up a squid Installation (debian 4.0, squid3) with ntlm_authentication.
Now when I browse the logfiles there seems to be a little Problem with the assignment between the users and the requests. There are some requests from an IP-Adress with User A and requests from another IP and a different User. But a few lines later both IPs have the same User, which imho should be impossible. e.g. 12/Dec/2008 13:24:43 xxx.xxx.xxx.97 200 1290 GET http://somedomain.tld USER_A TCP_HIT - 12/Dec/2008 13:24:43 xxx.xxx.xxx.97 200 663 GET http://somedomain.tld USER_A TCP_MISS - 12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://otherdomain.tld USER_B TCP_MISS - 12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://someotherdomain.tld USER_A TCP_MISS - 12/Dec/2008 13:24:48 xxx.xxx.xxx.97 200 716 GET http://yetanotherdomain.tld USER_A TCP_MISS - 12/Dec/2008 13:24:48 xxx.xxx.xxx.97 304 243 GET http://yetanotherdomain.tld USER_B TCP_IMS_HIT - 12/Dec/2008 13:24:43 xxx.xxx.xxx.109 200 17849 GET http://2otherdomain.tld USER_B TCP_MISS - xxx.xxx.xxx.97: Should be USER_A xxx.xxx.xxx.109: Should be USER_B Any idea what is going on there? Greets Philip
