antonio.rodrigues@xxxxxxxxxxxx wrote:
Hi,
I've a problem that puzzles me for some time and I finally decided to
ask for help. We are trying to access a site:
194.79.66.154/sites/intelligent_cities/default.aspx
that asks for a username and a password. If in the browser, IE or
Firefox, I define a direct access to the site, no proxy, it works OK, but if I try
using Squid as a proxy it returns:
"
You are not authorized to view this page You do not have permission to
view this directory or page using the credentials that you supplied
because your Web browser is sending a WWW-Authenticate header field that
the Web server is not configured to accept.
"
I try to use a direct access but with no success, in squid.conf:
"
acl plim src 194.79.66.154/0.0.0.0
always_direct allow plim
"
any help ?
thanks,
tomanix
It seems the web server is using NTLM authentication, see
http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.14
especially the line where says "We cannot proxy connections to a origin
server that use NTLM authentication".
NTLM scheme doesn´t follow the HTTP standard.
You can try convince the web owner to switch to https instead NTLM
authentication.
some arguments;
http://www.webappsec.org/lists/websecurity/archive/2005-07/msg00006.html
--
Thanks
Emilio C.
