I run IE7 with integrated web authentication (IWA). When I go direct to an Apache server it works fine, but if I try to use it via squid where squid is also using Negotiate for proxy authentication I see the below. It seems IE7 does either proxy or web authentication but never both. Is this a known bug / limitation of IE7 ? Thanks Markus First exchange: GET http://opensuse.suse.home/manual/ HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* Accept-Language: en-gb UA-CPU: x86 Accept-Encoding: gzip, deflate If-Modified-Since: Wed, 12 Jul 2006 03:11:23 GMT If-None-Match: "2046f-1d87-cd568cc0;2046d-25e-cd1f040" User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727) Host: opensuse.suse.home Proxy-Connection: Keep-Alive HTTP/1.0 407 Proxy Authentication Required Server: squid/2.6.STABLE13 Date: Sun, 13 May 2007 16:13:40 GMT Content-Type: text/html Content-Length: 1346 Expires: Sun, 13 May 2007 16:13:40 GMT X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Proxy-Authenticate: Negotiate X-Cache: MISS from opensuse.suse.home X-Cache-Lookup: NONE from opensuse.suse.home:3128 Via: 1.0 opensuse.suse.home:3128 (squid/2.6.STABLE13) Proxy-Connection: close Second exchange: GET http://opensuse.suse.home/manual/ HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* Accept-Language: en-gb UA-CPU: x86 Accept-Encoding: gzip, deflate If-Modified-Since: Wed, 12 Jul 2006 03:11:23 GMT If-None-Match: "2046f-1d87-cd568cc0;2046d-25e-cd1f040" User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727) Proxy-Authorization: Negotiate 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 vvBYBzYZjLkBvQJaOFWJf0Tra+6hUvZg1d/7yoyRknw3K9KRlf8/2Ro6mTuOmvftn8SlfYQDuJERAEUY8ytdIhwkQWsUC/Ck/a1KHUteHSoKGtQaLpnekEgru/s8snSqXCF9bR2Zu0sWBtdK6TkNB/vRdAew9iPGTav+XbolIeMLvsbs0UNDkcwW0mnb333x2Vl8hObwEhrB7ZIskdWah+IKWA3TKay4v553LUAJ4VfWPwg94JUVcWpUMms0ouwJt3DUxwkM11Y6iZQykQBs0WJtAeZgF7t8VntrLH7mgt1F7PHC+y8JpWueQMimCOsDCeUzehGL+bAeFPjvjdlcltW9hvqzXgJPtlaRwP0jxCfIlrBEjenbwWifQ19lbrGlGgux16a2cPTiG+qEJmgy0iSL12DEKELi1oqvjw6OgRhO4GrA8YLu3YG9d44+IYgTivXwcevhfo8x0OeCuk//PcO+Wk6E4Kq6o5z9Tevn6hWwaSBxjCBw6ADAgEXooG7BIG4dbn173imv3T4qgTmuQgoE1f5AfEH7jmRJhrQnlnu7uEGbj35cSsKPnDyhQEEIlqyHaogcVPEn2LxCqEn7OrIsEq0wnOrqFrCslOpiIpfl8FYBYxgUR1QjiUQkIvmpAzBS7Nf9xmhsWVEnf1Ueku/BtRHF7yfqcTHTy6SCQ1w/75uF1yHHMMECFoCGGKRijA2k4YOAL8fAYt81Lm74o15O85cyJt98kiqScT3LcpVhdfjOKgILygySA== Proxy-Connection: Keep-Alive Host: opensuse.suse.home HTTP/1.0 401 Unauthorized Date: Sun, 13 May 2007 16:13:40 GMT Server: Apache/2.2.3 (Linux/SUSE) WWW-Authenticate: Negotiate Vary: accept-language,accept-charset Accept-Ranges: bytes Content-Type: text/html; charset=iso-8859-1 Content-Language: en Expires: Sun, 13 May 2007 16:13:40 GMT Proxy-support: Session-Based-Authentication Connection: Proxy-support Proxy-Authenticate: Negotiate 1dXYANUA2AAAAADVAAAAAAAABAAAAAAABNUJANUAANUEAAAAAAAAAAAAAAAAAAAAAADYAAAAANUAAAAABAAAANgAAAAABAAAAAAAAAAAAASgtwAAAAAA4AAA8AAAAAAAAEAAAaAAowAAAADMAAkAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAMAAAAAAAAgAAAAAAADMAAAAAAAAAAAAAAAAtwChAA== X-Cache: MISS from opensuse.suse.home X-Cache-Lookup: MISS from opensuse.suse.home:3128 Via: 1.0 opensuse.suse.home:3128 (squid/2.6.STABLE13) Proxy-Connection: close Third exchange: GET http://opensuse.suse.home/manual/ HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* Accept-Language: en-gb UA-CPU: x86 Accept-Encoding: gzip, deflate If-Modified-Since: Wed, 12 Jul 2006 03:11:23 GMT If-None-Match: "2046f-1d87-cd568cc0;2046d-25e-cd1f040" User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727) Host: opensuse.suse.home Proxy-Connection: Keep-Alive Authorization: Negotiate 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 kGuBatTgN1SAAsfQaxa+xqoBnaYvdHK1Ve1NV+uF42dkHFnWxmvvBYBzYZjLkBvQJaOFWJf0Tra+6hUvZg1d/7yoyRknw3K9KRlf8/2Ro6mTuOmvftn8SlfYQDuJERAEUY8ytdIhwkQWsUC/Ck/a1KHUteHSoKGtQaLpnekEgru/s8snSqXCF9bR2Zu0sWBtdK6TkNB/vRdAew9iPGTav+XbolIeMLvsbs0UNDkcwW0mnb333x2Vl8hObwEhrB7ZIskdWah+IKWA3TKay4v553LUAJ4VfWPwg94JUVcWpUMms0ouwJt3DUxwkM11Y6iZQykQBs0WJtAeZgF7t8VntrLH7mgt1F7PHC+y8JpWueQMimCOsDCeUzehGL+bAeFPjvjdlcltW9hvqzXgJPtlaRwP0jxCfIlrBEjenbwWifQ19lbrGlGgux16a2cPTiG+qEJmgy0iSL12DEKELi1oqvjw6OgRhO4GrA8YLu3YG9d44+IYgTivXwcevhfo8x0OeCuk//PcO+Wk6E4Kq6o5z9Tevn6hWwaSBxjCBw6ADAgEXooG7BIG40wgZKu+PDF0qrSyHQ3rlmjqFGGjDgTFAsGq7af+djKh6OYmEMja/AGaNL5SQotvMseuV/2bDMZu2N+bBETwp8E19NNgsde8PZqkC6hKHEkIKOW0cAcrUB1FmFmtTlNk/yTVlQDwFebZh3eK5UDXfP1NGFZ3qSYW8KixnUJCRshC1jMgvi+kQRQHtQz1pDD+OEWmIQWGf1bJlDt0RzFTXtjzsK9ua8DIGZsUMAWHZCi7RIrlr44SHHQ== HTTP/1.0 407 Proxy Authentication Required Server: squid/2.6.STABLE13 Date: Sun, 13 May 2007 16:13:40 GMT Content-Type: text/html Content-Length: 1346 Expires: Sun, 13 May 2007 16:13:40 GMT X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Proxy-Authenticate: Negotiate X-Cache: MISS from opensuse.suse.home X-Cache-Lookup: NONE from opensuse.suse.home:3128 Via: 1.0 opensuse.suse.home:3128 (squid/2.6.STABLE13) Proxy-Connection: close Fourth exchange: GET http://opensuse.suse.home/manual/ HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */* Accept-Language: en-gb UA-CPU: x86 Accept-Encoding: gzip, deflate If-Modified-Since: Wed, 12 Jul 2006 03:11:23 GMT If-None-Match: "2046f-1d87-cd568cc0;2046d-25e-cd1f040" User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727) Proxy-Authorization: Negotiate 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 vvBYBzYZjLkBvQJaOFWJf0Tra+6hUvZg1d/7yoyRknw3K9KRlf8/2Ro6mTuOmvftn8SlfYQDuJERAEUY8ytdIhwkQWsUC/Ck/a1KHUteHSoKGtQaLpnekEgru/s8snSqXCF9bR2Zu0sWBtdK6TkNB/vRdAew9iPGTav+XbolIeMLvsbs0UNDkcwW0mnb333x2Vl8hObwEhrB7ZIskdWah+IKWA3TKay4v553LUAJ4VfWPwg94JUVcWpUMms0ouwJt3DUxwkM11Y6iZQykQBs0WJtAeZgF7t8VntrLH7mgt1F7PHC+y8JpWueQMimCOsDCeUzehGL+bAeFPjvjdlcltW9hvqzXgJPtlaRwP0jxCfIlrBEjenbwWifQ19lbrGlGgux16a2cPTiG+qEJmgy0iSL12DEKELi1oqvjw6OgRhO4GrA8YLu3YG9d44+IYgTivXwcevhfo8x0OeCuk//PcO+Wk6E4Kq6o5z9Tevn6hWwaSBxjCBw6ADAgEXooG7BIG4+JR/OvEr8flHYfD6zoH40ZMmfJJrOLvimf3ENoBJV8nmbJUDJNde4+xBcakqU4AME4dV/OUcswgMQjC0YqWT7ttMT72CSu7n5Qak3WX8IrwrlqAELu1z3lEixVc6IGpVoapH8qw78Q2OJ4eqocp5PkLfYh09up/nldE3+dHH8YYedUSRfHUchmAhz141RBhlcFU9Ad8bIVvW94Ml2RNGBdo73qpKRgbQsRVRTwLJEbUgvwGRLmW/YQ== Proxy-Connection: Keep-Alive Host: opensuse.suse.home HTTP/1.0 401 Unauthorized Date: Sun, 13 May 2007 16:13:40 GMT Server: Apache/2.2.3 (Linux/SUSE) WWW-Authenticate: Negotiate Vary: accept-language,accept-charset Accept-Ranges: bytes Content-Type: text/html; charset=iso-8859-1 Content-Language: en Expires: Sun, 13 May 2007 16:13:40 GMT Proxy-support: Session-Based-Authentication Connection: Proxy-support Proxy-Authenticate: Negotiate 1dXYANUA2AAAAADVAAAAAAAABAAAAAAABNUJANUAANUEAAAAAAAAAAAAAAAAAAAAAADYAAAAANUAAAAABAAAANgAAAAABAAAAAAJALcI4QCiAAAAAAAAAAgAAAAAAQAAAAAAAAD7AAAAAAAAAAAAAAAAtwAAAAAAAAAAAOEA1f8AAAAAzAIAAAAAAAABAAAAAAAA/9UA+wAAAAAAAAAAAAAIAA== X-Cache: MISS from opensuse.suse.home X-Cache-Lookup: MISS from opensuse.suse.home:3128 Via: 1.0 opensuse.suse.home:3128 (squid/2.6.STABLE13) Proxy-Connection: close and so on. It seems that IE7 does only one of the two authentications at a time. So it never works !!. BTW it works without problems when using Firefox GET http://opensuse.suse.home/manual/ HTTP/1.1 Host: opensuse.suse.home User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1.2) Gecko/20061023 SUSE/2.0.0.2-1.1 Firefox/2.0.0.2 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 Accept-Language: en-gb,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 300 Proxy-Connection: keep-alive Pragma: no-cache, no-cache, no-cache, no-cache Cache-Control: no-cache, no-cache, no-cache, no-cache Proxy-Authorization: Negotiate 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 Authorization: Negotiate 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 HTTP/1.0 200 OK Date: Sun, 13 May 2007 16:29:06 GMT Server: Apache/2.2.3 (Linux/SUSE) WWW-Authenticate: Negotiate YB4GBisGAQUFAqEUMBKgAwoBAKELBgkqhkiG9xIBAgI= Content-Location: index.html.en Vary: negotiate,accept-language,accept-charset TCN: choice Last-Modified: Wed, 12 Jul 2006 03:11:23 GMT ETag: "2046f-1d87-cd568cc0;2046d-25e-cd1f040" Accept-Ranges: bytes Content-Length: 7559 Content-Type: text/html Content-Language: en Expires: Sun, 13 May 2007 16:29:06 GMT Proxy-support: Session-Based-Authentication Connection: Proxy-support Proxy-Authenticate: Negotiate 1QAAANgAAAAA1QAAAAAAAAAAAAAAAA== X-Cache: MISS from opensuse.suse.home X-Cache-Lookup: HIT from opensuse.suse.home:3128 Via: 1.0 opensuse.suse.home:3128 (squid/2.6.STABLE13) Proxy-Connection: keep-alive
