Sorry - that was misleading. I've had persistent_connection_after_error set on throughout my testing. I get the same error as Brett only when the body of the post is much greater than that which causes the post to fail. I'd like to correlate network traces with debug output and would appreciate suggestions as to which debug_options would include all possibly relevant info -----Original Message----- From: Bill Allison [mailto:bill.allison@xxxxxxxxx] Sent: 16 December 2009 12:07 To: Amos Jeffries; squid-users@xxxxxxxxxxxxxxx Subject: RE: any work arounds for bug 2176 "Do you get the same result as Brett with persistent_connection_after_error set to ON?" Yes - I've had it set on throughout my testing. -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: 16 December 2009 10:46 To: squid-users@xxxxxxxxxxxxxxx Subject: Re: any work arounds for bug 2176 Bill Allison wrote: > Amos > > I've done some more testing / tracing with this - one finding and one question to help me do more. > > My finding is that the response to a large POST varies - put simply, a small (< 5Kb) POST succeeds, larger POST pops up UID/PWD request, large (> 80Kb) gives the INVALID VERB error that Brett reported. There is no exact borderline size. Sometimes a 6Kb upload will succeed, sometimes the max is around 4Kb. This is on an otherwise idle test server. So far I've only tcpdumped the first two cases and can see that in the middle case, the proxy issues FIN packets to server and client just after receiving and passing on the second 401 response from the server. A feature, if not a factor, common to failures, at least in traces taken so far, is that transfer of the upload to the server begins before receipt of the upload from the client has completed. Comment please? > > My question - I'd now like to marry up tcpdump traces with squid debug output. Having read up on debug_options, I've used 5,6 17,6 33,6 41,6 48,6 58,6 73,6 85,6 87,6 88,6. What would be a better set? > > For the avoidance of doubt - I'm a rank amateur (as if you haven't already guessed :-) ) but really need to find a fix or workaround, despite knowing that Microsoft state that IIS NTLM authentication can not work through proxy servers. Any pointers gratefully received. > > Kind regards > Bill A. > Hmm, I wonder... Do you get the same result as Brett with persistent_connection_after_error set to ON? The default in all Squid is OFF which forces the connection closed on all 4xx replies regardless of the patched Squid now seeing it as a viable connection. Amos -- Please be using Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20 Current Beta Squid 3.1.0.15 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
