Hi guys,
I'm upgrading a squid install from 3.1.23 to squid 3.3.5 and have
noticed that I can no longer authenticate using NTLM in IE10 when I have
a machine that is not on the domain (domain machines work fine).
I have attached snippets from traces for the working and non-working
versions (I have the full pcap files if anyone wants them) and
interestingly enough I also see the following in the log file while I
try to authenticate:
2013/05/29 17:38:38.211 kid1| auth_ntlm.cc(247) fixHeader: Sending
type:40 header: 'NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomi4lhV
hRyKPsAAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAb
AADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA=='
2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(48) authenticated: user not
fully authenticated.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(338) authenticate: header
NTLM TlRMTVNTUAADAAAAGAAYAKAAAAAgASABuAAAABoAGgBYAAAAF
AAUAHIAAAAaABoAhgAAAAAAAADYAQAABYKIogYBsR0AAAAPsR9j27hinFMvBkj5IH2Tw2EAbABhAG4AVwBpAG4ANwBQAEMALQBQAEMAYQBsAGEAbgBXAGkAbgA3AF
AAQwBBAEwAQQBOAFcASQBOADcAUABDAC0AUABDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJjy5Usdqn2l447R9Fg3VaoBAQAAAAAAAHU+7aeLXM4B95Bx7FEGHp8
AAAAAAgAIAEEATABCAEEAAQAaAFYAQQBOAEkATABMAEEALQBTAFEAVQBJAEQABAAUAGEAbABiAGEALgBsAG8AYwBhAGwAAwAwAHYAYQBuAGkAbABsAGEALQBzAHEA
dQBpAGQALgBhAGwAYgBhAC4AbABvAGMAYQBsAAgAMAAwAAAAAAAAAAEAAAAAIAAA58qwv/jdnQsmog5mklTMWUvkbFB3qPJx0C9nbroc9VcGAAQABAAAAAoAEAAAA
AAAAAAAAAAAAAAAAAAACQAiAEgAVABUAFAALwAxADcAMgAuADIAMQAuADUAMAAuADIAMQAAAAAAAAAAAA==.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(342) authenticate: This is
a new checklist test on:local=172.21.50.21:3128 remot
e=172.21.123.30:63719 FD 10 flags=1
2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(48) authenticated: user not
fully authenticated.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(48) authenticated: user not
fully authenticated.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:38:38.213 kid1| UserRequest.cc(66) start:
auth_user_request '0x1321be0'
2013/05/29 17:38:38.213 kid1| UserRequest.cc(95) module_start:
credentials state is '3'
2013/05/29 17:38:38.215 kid1| UserRequest.cc(233) HandleReply: helper:
'0x1321d48' sent us 'NA NT_STATUS_NO_SUCH_USER'
2013/05/29 17:38:38.215 kid1| UserRequest.cc(118) releaseAuthServer:
releasing NTLM auth server '0x1321d48'
2013/05/29 17:38:38.215 kid1| UserRequest.cc(324) HandleReply: Failed
validating user via NTLM. Error returned 'NT_STATUS_NO_SUCH_USER'
But I know the user is valid... and I've just notice if I now refresh
the page I get authenticated fine:
2013/05/29 17:46:02.102 kid1| auth_ntlm.cc(247) fixHeader: Sending
type:40 header: 'NTLM
TlRMTVNTUAACAAAACAAIADAAAAAFgomiSUlUxVy56ZsAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA=='
2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(48) authenticated: user not
fully authenticated.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(338) authenticate: header
NTLM
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.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(342) authenticate: This is
a new checklist test on:local=172.21.50.21:3128
remote=172.21.123.30:63720 FD 10 flags=1
2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(48) authenticated: user not
fully authenticated.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(48) authenticated: user not
fully authenticated.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated.
Auth::UserRequest '0x1321be0'.
2013/05/29 17:46:02.104 kid1| UserRequest.cc(66) start:
auth_user_request '0x1321be0'
2013/05/29 17:46:02.104 kid1| UserRequest.cc(95) module_start:
credentials state is '3'
2013/05/29 17:46:03.654 kid1| UserRequest.cc(233) HandleReply: helper:
'0x1321d48' sent us 'AF ALBA\ntlmauth2'
2013/05/29 17:46:03.656 kid1| UserRequest.cc(118) releaseAuthServer:
releasing NTLM auth server '0x1321d48'
2013/05/29 17:46:03.656 kid1| UserRequest.cc(289) HandleReply:
Successfully validated user via NTLM. Username 'ALBA\ntlmauth2'
2013/05/29 17:46:03.656 kid1| UserRequest.cc(291) HandleReply:
authenticated user ALBA\ntlmauth2
I guess this is probably a bug, should I raise it in bugzilla? Is there
anything else that is needed?
Cheers,
-- Michael Graham <mgraham_at_bloxx.com>
Stream 3:
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
DNT: 1
Proxy-Connection: Keep-Alive
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:01 GMT
Content-Type: text/html
Content-Length: 3402
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
DNT: 1
Proxy-Connection: Keep-Alive
Host: www.example.com
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:01 GMT
Content-Type: text/html
Content-Length: 3500
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomiGYv9JBguRSEAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA==
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
DNT: 1
Proxy-Connection: Keep-Alive
Proxy-Authorization: NTLM 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
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:01 GMT
Content-Type: text/html
Content-Length: 4080
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
Proxy-Connection: Keep-Alive
DNT: 1
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:24 GMT
Content-Type: text/html
Content-Length: 3500
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
DNT: 1
Proxy-Connection: Keep-Alive
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:30 GMT
Content-Type: text/html
Content-Length: 3500
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
Proxy-Connection: Keep-Alive
DNT: 1
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:34 GMT
Content-Type: text/html
Content-Length: 3500
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: http://www.example.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
DNT: 1
Host: www.squid-cache.org
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:34 GMT
Content-Type: text/html
Content-Length: 3551
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: http://www.example.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
DNT: 1
Host: www.squid-cache.org
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:34 GMT
Content-Type: text/html
Content-Length: 3649
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: http://www.example.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Host: www.squid-cache.org
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
DNT: 1
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:42 GMT
Content-Type: text/html
Content-Length: 3649
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: http://www.example.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Host: www.squid-cache.org
DNT: 1
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:46 GMT
Content-Type: text/html
Content-Length: 3649
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
<snip>
GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: http://www.example.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Connection: Keep-Alive
Host: www.squid-cache.org
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
DNT: 1
HTTP/1.1 407 Proxy Authentication Required
Server: squid/3.3.5
Mime-Version: 1.0
Date: Wed, 29 May 2013 16:20:50 GMT
Content-Type: text/html
Content-Length: 3649
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.1 vanilla-squid (squid/3.3.5)
Connection: keep-alive
Stream 20:
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
DNT: 1
Proxy-Connection: Keep-Alive
HTTP/1.0 407 Proxy Authentication Required
Server: squid/3.1.23
Mime-Version: 1.0
Date: Wed, 29 May 2013 15:54:38 GMT
Content-Type: text/html
Content-Length: 3403
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.0 vanilla-squid (squid/3.1.23)
Connection: close
<snip!>
Stream 21:
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
DNT: 1
Proxy-Connection: Keep-Alive
Host: www.example.com
HTTP/1.0 407 Proxy Authentication Required
Server: squid/3.1.23
Mime-Version: 1.0
Date: Wed, 29 May 2013 15:54:38 GMT
Content-Type: text/html
Content-Length: 3501
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomi/+6uiRiGwwAAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA==
X-Cache: MISS from vanilla-squid
Via: 1.0 vanilla-squid (squid/3.1.23)
Connection: keep-alive
<body>
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
DNT: 1
Proxy-Connection: Keep-Alive
Proxy-Authorization: NTLM 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
HTTP/1.0 407 Proxy Authentication Required
Server: squid/3.1.23
Mime-Version: 1.0
Date: Wed, 29 May 2013 15:54:38 GMT
Content-Type: text/html
Content-Length: 4079
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Internet via XXXXW"
X-Cache: MISS from vanilla-squid
Via: 1.0 vanilla-squid (squid/3.1.23)
Connection: close
<snip>
Stream 22:
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Host: www.example.com
Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==
Proxy-Connection: Keep-Alive
DNT: 1
HTTP/1.0 407 Proxy Authentication Required
Server: squid/3.1.23
Mime-Version: 1.0
Date: Wed, 29 May 2013 15:54:56 GMT
Content-Type: text/html
Content-Length: 3501
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en-us
Proxy-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomirbXsFhuGeSQAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA==
X-Cache: MISS from vanilla-squid
Via: 1.0 vanilla-squid (squid/3.1.23)
Connection: keep-alive
<snip>
GET http://www.example.com/ HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)
Accept-Encoding: gzip, deflate
Proxy-Authorization: NTLM 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
Host: www.example.com
Proxy-Connection: Keep-Alive
DNT: 1
HTTP/1.0 302 Moved Temporarily
Date: Wed, 29 May 2013 15:59:39 GMT
Location: http://example.iana.org
Server: BigIP
Content-Length: 0
X-Cache: MISS from vanilla-squid
Via: 1.0 vanilla-squid (squid/3.1.23)
Connection: keep-alive
<hurrah!>
Received on Wed May 29 2013 - 17:07:04 MDT
This archive was generated by hypermail 2.2.0 : Wed May 29 2013 - 12:00:07 MDT
