Re: Digest Authentication and Brute Force Attack

"alberto.avi@xxxxxxxxx" <alberto.avi@xxxxxxxxx> · Thu, 18 May 2006 16:56:28 +0200

Hi Henrik,

   I'm using squid-2.5.STABLE12 . I'm trying authentication with a bad 
password. In the access.log file I don't see the userid :

1147963589.188    386 10.182.35.253 TCP_DENIED/407 1726 GET 
http://www.google.com/ - NONE/- text/html
1147963589.220     32 10.182.35.253 TCP_DENIED/407 1726 GET 
http://www.google.com/ - NONE/- text/html
1147963591.268    114 10.182.35.253 TCP_DENIED/407 1726 GET 
http://www.google.com/ - NONE/- text/html

If I give the correct password the log are ok :

1147963613.152    981 10.182.35.253 TCP_MISS/302 475 GET 
http://www.google.com/ US01170 DIRECT/66.249.85.104 text/html

Some ideas ?

Thanks a lot,

Alberto.