[squid-users] Squid and Web Login Prompts

From: Mosbach, Dieter <[email protected]>
Date: Thu, 28 Aug 2003 11:32:31 +0200

Hello,

we are using Squid as our proxy server,
SuSE-rpm squid-2.5.STABLE1-0.
If someone goes to the site metalink.oracle.com,
clicking on link "Login to MetaLink!"
which has a pop up login window, this pop up never comes up and the
page says access denied from the server.

proxy:/tmp # wget http://metalink.oracle.com/metalink/plsql/ml2_gui.startup
--10:21:29-- http://metalink.oracle.com/metalink/plsql/ml2_gui.startup
           => `ml2_gui.startup'
Resolving localhost... done.
Connecting to localhost[127.0.0.1]:3128... connected.
Proxy request sent, awaiting response... 401 Unauthorized
Authorization failed.

Without squid, everything is fine.

proxy:/tmp # http_proxy="" wget http://metalink.oracle.com/metalink/plsql/ml2_gui.startup
--10:21:25-- http://metalink.oracle.com/metalink/plsql/ml2_gui.startup
           => `ml2_gui.startup'
Resolving metalink.oracle.com... done.
Connecting to metalink.oracle.com[148.87.8.74]:80... connected.
HTTP request sent, awaiting response... 401 Authorization Required
Authorization failed.

Can somebody reproduce this behaviour?

Any ideas how I can get this to work correctly through Squid?

my squid.conf:

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
acl VIRENUPDATE urlpath_regex livetri.zip
no_cache deny VIRENUPDATE
cache_mem 48 MB
maximum_object_size 65536 KB
maximum_object_size_in_memory 48 KB
cache_dir ufs /var/cache/squid 1500 8 128
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl wzmlan src 10.10.12.0/24
acl wzmwlan src 10.10.13.0/24
acl wzmdmz src 192.168.117.0/24
acl worm urlpath_regex -i readme\.eml$
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny worm
http_access allow wzmlan
http_access allow wzmwlan
http_access allow wzmdmz
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
forwarded_for off
coredump_dir /var/cache/squid

Regards,
Dieter Mosbach
Received on Thu Aug 28 2003 - 03:33:19 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:16 MST