[squid-users] Chrome as a client of Squid

From: Jason Fitzpatrick <jayfitzpatrick_at_gmail.com>
Date: Tue, 1 May 2012 17:09:10 +0100

Hi All

I have a Squid Server (squid-3.2.0.16-1.fc16.x86_64) which is set to
upstream to a 3rd party gateway proxy server and therefore has to
authenticate all users destined for the internet (internal traffic is
not required to authenticate)

While this works perfectly from IE and Firefox (NTLM authentication
falling back to basic) chrome clients are unable to authenticate
against the squid at all.

(chrome is the latest version at time of writing 18.0.1025.168 m)

I see the following in the debug logging:

2012/05/01 16:50:45.674 kid1| ACLChecklist::preCheck: 0x7fdaa23a98c8
checking 'http_access allow AuthorizedUsers'
2012/05/01 16:50:45.674 kid1| ACLList::matches: checking AuthorizedUsers
2012/05/01 16:50:45.674 kid1| ACL::checklistMatches: checking 'AuthorizedUsers'
2012/05/01 16:50:45.674 kid1| Acl.cc(61) AuthenticateAcl: returning 0
sending authentication challenge.
2012/05/01 16:50:45.674 kid1| ACL::ChecklistMatches: result for
'AuthorizedUsers' is 0
2012/05/01 16:50:45.674 kid1| ACLList::matches: result is false
2012/05/01 16:50:45.674 kid1| ACLChecklist::checkForAsync: requiring
Proxy Auth header.
2012/05/01 16:50:45.674 kid1| ACLChecklist::markFinished:
0x7fdaa23a98c8 checklist processing finished
2012/05/01 16:50:45.674 kid1| aclmatchAclList: async=1 nodeMatched=0
async_in_progress=0 lastACLResult() = 0 finished() = 1
2012/05/01 16:50:45.674 kid1| aclmatchAclList: 0x7fdaa23a98c8
returning (AND list entry failed to match)
2012/05/01 16:50:45.674 kid1| ACLChecklist::check: 0x7fdaa23a98c8
match found, calling back with 3
2012/05/01 16:50:45.674 kid1| FilledChecklist.cc(18) checkCallback:
0x7fdaa23a98c8 answer=3
2012/05/01 16:50:45.675 kid1| aclCacheMatchFlush called for cache 0x7fdaa23d9a18
2012/05/01 16:50:45.675 kid1| ACLChecklist::checkCallback:
0x7fdaa23a98c8 answer=3
2012/05/01 16:50:45.675 kid1| Gadgets.cc(57) aclGetDenyInfoPage: got
called for AuthorizedUsers
2012/05/01 16:50:45.675 kid1| aclGetDenyInfoPage: no match

And not much else, does anyone have any suggestions?

Thanks

Jay

--
"The only difference between saints and sinners is that every saint
has a past while every sinner has a future. "
— Oscar Wilde
Received on Tue May 01 2012 - 16:09:18 MDT

This archive was generated by hypermail 2.2.0 : Wed May 02 2012 - 12:00:03 MDT