Search squid archive

Re: Media players with proxy_auth REQUIRED

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Do you have a tcpdump of the failed authentication transactions?



Adrian

On Wed, Dec 19, 2007, Olsson, Mattias wrote:
> 
> 
> Hallo all!
> 
> Im running my squid server with proxy_auth REQUIRED. The Linux server is
> fully integrated with my AD. Samba/Winbind/kerberos all is working
> great. The problem i have is that IE / Windows is automatically
> authenticated against the proxy servers. But embedded players like
> Windows Media Player, Quicktime and others fails to automatically auth.
> I get a popup box where i can enter username / password to auth. If i do
> so, i get authed and i can se the movie ...
> 
> The problem is that we are going to remove username/password within the
> AD and just use smartcards. So i need to figure out how to solve this or
> create and acl where i can allowd media sites.
> 
> Is it possible to solve the Media Player issue? To have it auth the same
> way as IE?
> 
> How can i create an acl that allows some media sites?
> 
> 
> #From my squid.conf - local networks have to auth.
> acl MYNETWORK proxy_auth REQUIRED src 192.168.0.0/255.255.0.0
> http_access allow MYNETWORK
> 
> 
> #Tried to do something like this....
> acl NoAUTHsite dstdomain *.domain1.com
> acl NoAUTHsite dstdomain *.domain2.com
> http_access allow NoAUTHsite
> 
> 
> 
> 
> #This is from access.log when im trying to view a media link.
> 
> 1198061741.907     21 127.0.0.1 TCP_MISS/404 4478 GET
> http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css MYUSERNAME
> DIRECT/192.71.238.83 text/html
> 1198061741.922     58 127.0.0.1 TCP_MISS/200 2586 GET
> http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv_ad_right.jsp?
> MYUSERNAME DIRECT/192.71.238.83 text/html
> 1198061741.933      0 127.0.0.1 TCP_DENIED/407 2159 GET
> http://www.aftonbladet.se/statistik/instadia/clientstep.js - NONE/-
> text/html
> 1198061741.936      0 127.0.0.1 TCP_DENIED/407 2089 GET
> http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
> se/webbtv/noje/1366798459@WTV_Bottom? - NONE/- text/html
> 1198061741.936      0 127.0.0.1 TCP_DENIED/407 1999 GET
> http://qstream-wm.qbrick.com/00862/aftonbladet1/Noje/0712/m0nj071219Cloo
> ney.wmv - NONE/- text/html
> 1198061741.939      0 127.0.0.1 TCP_DENIED/407 1930 GET
> http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css - NONE/-
> text/html
> 1198061741.944      0 127.0.0.1 TCP_DENIED/407 2312 GET
> http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
> se/webbtv/noje/1366798459@WTV_Bottom? - NONE/- text/html
> 1198061741.950      0 127.0.0.1 TCP_DENIED/407 2153 GET
> http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css - NONE/-
> text/html
> 1198061741.971     34 127.0.0.1 TCP_MISS/302 451 GET
> http://www.aftonbladet.se/statistik/instadia/clientstep.js MYUSERNAME
> DIRECT/192.71.238.76 text/javascript
> 1198061742.012     68 127.0.0.1 TCP_MISS/200 744 GET
> http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
> se/webbtv/noje/1366798459@WTV_Bottom? MYUSERNAME DIRECT/192.71.238.79
> application/x-javascript
> 1198061742.025     13 127.0.0.1 TCP_MISS/302 449 GET
> http://www.aftonbladet.se/statistik/instadia/specials.js MYUSERNAME
> DIRECT/192.71.238.76 text/javascript
> 1198061742.048      2 127.0.0.1 TCP_IMS_HIT/304 331 GET
> http://ad.aftonbladet.se/RealMedia/ads/Creatives/default/empty.gif
> MYUSERNAME NONE/- image/gif
> 1198061742.048     99 127.0.0.1 TCP_MISS/404 5864 GET
> http://wwwc.aftonbladet.se/special/webbtv/jsp/webbtv.css MYUSERNAME
> DIRECT/192.71.238.83 text/html
> 1198061742.062      0 127.0.0.1 TCP_DENIED/407 1888 GET
> http://se1.instadia.net/cgi-bin/gatherfpc? - NONE/- text/html
> 1198061742.069      0 127.0.0.1 TCP_DENIED/407 2111 GET
> http://se1.instadia.net/cgi-bin/gatherfpc? - NONE/- text/html
> 1198061742.083      0 127.0.0.1 TCP_DENIED/407 2086 GET
> http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
> se/webbtv/noje/1480941804@WTV_Right? - NONE/- text/html
> 1198061742.085      0 127.0.0.1 TCP_DENIED/407 2008 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071214fi
> lmerny.jpg - NONE/- text/html
> 1198061742.093      1 127.0.0.1 TCP_DENIED/407 2309 GET
> http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
> se/webbtv/noje/1480941804@WTV_Right? - NONE/- text/html
> 1198061742.094      0 127.0.0.1 TCP_DENIED/407 2231 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071214fi
> lmerny.jpg - NONE/- text/html
> 1198061742.124     76 127.0.0.1 TCP_MISS/200 655 GET
> http://sifo.aftonbladet.se/data/? MYUSERNAME DIRECT/80.76.145.58
> image/gif
> 1198061742.134     64 127.0.0.1 TCP_MISS/200 478 GET
> http://se1.instadia.net/cgi-bin/gatherfpc? MYUSERNAME
> DIRECT/193.88.187.16 image/gif
> 1198061742.145     50 127.0.0.1 TCP_MISS/200 7394 GET
> http://ad.aftonbladet.se/RealMedia/ads/adstream_mjx.ads/www.aftonbladet.
> se/webbtv/noje/1480941804@WTV_Right? MYUSERNAME DIRECT/192.71.238.79
> application/x-javascript
> 1198061742.154     60 127.0.0.1 TCP_MEM_HIT/200 3957 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071214fi
> lmerny.jpg MYUSERNAME NONE/- image/jpeg
> 1198061742.169     15 127.0.0.1 TCP_MEM_HIT/200 3744 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071213pa
> risNEW.jpg MYUSERNAME NONE/- image/jpeg
> 1198061742.179      9 127.0.0.1 TCP_IMS_HIT/304 347 GET
> http://ad.aftonbladet.se/RealMedia/ads/Creatives/TFSMflashobject.js
> MYUSERNAME NONE/- application/x-javascript
> 1198061742.188      8 127.0.0.1 TCP_IMS_HIT/304 353 GET
> http://ad.aftonbladet.se/RealMedia/ads/Creatives/OasDefault/WTV_unibet_3
> 7742//jubileum_180x560_brakskiva9900267.swf MYUSERNAME NONE/-
> application/x-shockwave-flash
> 1198061742.348     56 127.0.0.1 TCP_MEM_HIT/200 4488 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071212pa
> risinslag.jpg MYUSERNAME NONE/- image/jpeg
> 1198061742.353      5 127.0.0.1 TCP_MEM_HIT/200 4488 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071212pa
> risinslag.jpg MYUSERNAME NONE/- image/jpeg
> 1198061743.180    827 127.0.0.1 TCP_MEM_HIT/200 3434 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg MYUSERNAME NONE/- image/jpeg
> 1198061743.185      0 127.0.0.1 TCP_DENIED/407 2023 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg - NONE/- text/html
> 1198061743.208      0 127.0.0.1 TCP_DENIED/407 2246 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg - NONE/- text/html
> 1198061743.249      0 127.0.0.1 TCP_DENIED/407 2023 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg - NONE/- text/html
> 1198061743.257     49 127.0.0.1 TCP_MEM_HIT/200 3434 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg MYUSERNAME NONE/- image/jpeg
> 1198061743.265      0 127.0.0.1 TCP_DENIED/407 2246 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg - NONE/- text/html
> 1198061743.310     37 127.0.0.1 TCP_MEM_HIT/200 3434 GET
> http://wwwc.aftonbladet.se/special/webbtv/bilder2/Noje/0712/p1nj071207Br
> ittanskille.jpg MYUSERNAME NONE/- image/jpeg
> 1198061743.864      0 127.0.0.1 TCP_DENIED/407 2222 GET
> http://qstream-wm.qbrick.com/00862/aftonbladet1/Noje/0712/m0nj071219Cloo
> ney.wmv - NONE/- text/html
> 1198061744.569    705 127.0.0.1 TCP_MISS/200 4911 GET
> http://qstream-wm.qbrick.com/00862/aftonbladet1/Noje/0712/m0nj071219Cloo
> ney.wmv MYUSERNAME DIRECT/194.14.243.158
> application/vnd.ms.wms-hdr.asfv1
> 
> 
> Kind regards
> 
> //Mattias Olsson

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux