Is it possible that you allow CONNECT without authentication ? A configuration error ?

Markus

----- Original Message ----- From: "Wojciech Dudys" <[email protected]>
To: "Markus Moeller" <[email protected]>
Sent: Thursday, August 27, 2009 8:47 AM
Subject: Re: [squid-users] Re: squid_kerb_auth and access.log issue


Auth is ok. I can get to https sites with no problem. There just is no
information about my login in the access.log
With http everything is ok.

Wojtek


"Markus Moeller" <[email protected]> wrote in message news:[email protected]... I am not sure, but squid_auth_kerb is a normal helper and doesn't do anything with logging. If auth fails which means squid_kerb_auth can not get the usename then squid evidently can not log it.

Markus


"Wojciech Dudys" <[email protected]> wrote in message news:[email protected]...
Hi,

I have squid 3.0.18 configured to use squid_kerb_auth helper.

When I make a proper HTTP request I see in the access.log:

1251290049.789 209 X.X.X.X TCP_MISS/200 486 POST
http://mail.google.com/mail/channel/bind? u...@realm
DIRECT/74.125.39.17 text/plain

Ident field is filled with u...@realm. And this is great.

but when I make HTTPS request I see:

1251289923.734 0 X.X.X.X TCP_DENIED/407 2233 CONNECT
www.google.com:443 - NONE/- text/html

and there is NONE in the Ident field.

The same situation is when I get TCP_DENIED

1251289928.638 0 X.X.X.X TCP_DENIED/407 3353 GET
http://mail.google.com/mail/? - NONE/- text/html


Is this a bug?

Regards





Reply via email to