Hello!
User --- Squid --------------------------------- Server
| |
Sniffer 1 Sniffer 2
The user get http://.../wcm/index.jsp and get a WWW-Authenticate. Then
he answers to squid with an authorization header. I saw that with
Sniffer 1. But then, the authorization header has been deleted between
Squid and Server.
Does my configuration makes this header desapear?
Thank you
PS: I'm using squid 2.6 Stable5
##########################################################
#-- Configuration serveur
http_port ***:4198 vhost defaultsite=webserver protocol=http
icp_port 0
cache_peer webserver parent 80 0 originserver name=sesamehttp
visible_hostname webserverVisible
pid_filename /var/run/squid.pid
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
cache_effective_user squid
cache_effective_group squid
httpd_suppress_version_string on
error_directory /usr/lib/squid/errors/French
#-- Configuration des caches
cache_dir aufs /cache0/ 20000 16 256
cache_dir aufs /cache1/ 20000 16 256
#-- Gestion du cache
hierarchy_stoplist ?
acl QUERY urlpath_regex \?
acl WCM urlpath_regex /wcm
acl forcecache urlpath_regex portail
acl static_content urlpath_regex -i \.(gif|jpeg|jpg|swf|png|bmp|pic|js|css|html)$
acl dynamic_content urlpath_regex -i (\.jsp$|objAction=xmlexport)
no_cache deny WCM
no_cache allow static_content
no_cache allow dynamic_content
no_cache deny QUERY
#refresh_pattern . 1440 20% 10080 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i \.(gif|jpeg|jpg|swf|png|bmp|pic|js|css|html)$ 1440 20% 28800 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i \.(js|css|class|jar|xml|txt|cfm|doc|xls|pdf)$ 1440 20% 28800 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i (\.jsp$|objAction=xmlexport) 60 20% 28800 override-expire override-lastmod reload-into-ims ignore-reload
cache_mem 12 MB
cache_swap_low 95
cache_swap_high 98
maximum_object_size 102400 KB
maximum_object_size_in_memory 10 KB
quick_abort_min 16 KB
quick_abort_max 16 KB
quick_abort_pct 95
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
#-- Politique d'acces au proxy
acl all src 0.0.0.0/0.0.0.0
acl localnet src ****
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.1/32
acl to_sesame dst ipwebserver/32
acl type_sesame type accelerated
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 4198 # http
acl CONNECT method CONNECT
acl allowed_methods method GET
acl allowed_methods method POST
acl allowed_methods method HEAD
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny !allowed_methods
http_access allow localnet
http_access allow localhost
http_access allow to_localhost
http_access allow type_sesame to_sesame
http_access deny all
http_reply_access allow all
icp_access deny all
relaxed_header_parser off
