Quantcast
Channel: General Networking
Viewing all articles
Browse latest Browse all 27527

Squid: Cache Access Denied when NTLM is enabled

$
0
0

I am most of the way through setting up a squid proxy server on pfSense and I am having issues with NTLM authentication. The first time I open a web page I receive a "page cannot be displayed error" but if I refresh the page loads fine. Wireshark captures on the 2 streams look like this(Page not loading on left, page loading on right)

It seems IE does not want to authenticate until the second time.

Does anybody know how to fix this?

Edit: Picture is a little hard to read so
Failed request:

CONNECT www.google.com.au:443 HTTP/1.0
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)
Host: www.google.com.au
Content-Length: 0
DNT: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache

HTTP/1.0 407 Proxy Authentication Required
Server: squid
Mime-Version: 1.0
Date: Wed, 24 Jul 2013 05:08:17 GMT
Content-Type: text/html
Content-Length: 3365
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: NTLM
X-Cache: MISS from squid.company.local
X-Cache-Lookup: NONE from squid.company.local:3128
Via: 1.0 squid.company.local (squid)
Connection: close

Successful request

CONNECT www.google.com.au:443 HTTP/1.0
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)
Host: www.google.com.au
DNT: 1
Proxy-Connection: Keep-Alive
Pragma: no-cache
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
Content-Length: 0

HTTP/1.0 407 Proxy Authentication Required
Server: squid
Mime-Version: 1.0
Date: Wed, 24 Jul 2013 05:08:20 GMT
Content-Type: text/html
Content-Length: 3463
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
Proxy-Authenticate: NTLM TlRMTVNTUAACAAAADAAMADgAAAAFgomiURdWtMYNXhYAAAAAAAAAAH4AfgBEAAAABgEAAAAAAA9GAEkATgBGAEkAVAACAAwARgBJAE4ARgBJAFQAAQAKAFAAUgBPAFgAWQAEACQAZgBmAGEAcABhAHkAcwBtAGEAcgB0AC4AYwBvAG0ALgBhAHUAAwAwAHAAcgBvAHgAeQAuAGYAZgBhAHAAYQB5AHMAbQBhAHIAdAAuAGMAbwBtAC4AYQB1AAAAAAA=
X-Cache: MISS from squid.company.local
X-Cache-Lookup: NONE from squid.company.local:3128
Via: 1.0 squid.company.local (squid)
Connection: keep-alive


Viewing all articles
Browse latest Browse all 27527

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>