On 22/08/11 17:57, Xavier Magnaudeix wrote:
Hi list, When surfing to http://privilege.ft.com/signin/news using squid-3.0.STABLE7-4 with windows seven(IE8), I never can see the page when I click on register. Using Windows XP + iE8 and same proxy, it works. Using Firefox on windows seven, I t works too. Can someone give a try with Seven + IE8 and see if you can get the same issue? And maybe see what is going on? Here come the logs: 1313683343.451 5 10.34.36.57 TCP_MISS/200 1695 GET http://privilege.ft.com/sites/all/themes/ftprivilege/img/header-signin-middl e.png csov FIRST_UP_PARENT/127.0.0.1 image/png 1313683343.453 5 10.34.36.57 TCP_MISS/200 1591 GET http://privilege.ft.com/sites/all/themes/ftprivilege/img/mask-bg.png csov FIRST_UP_PARENT/127.0.0.1 image/png 1313683343.490 15 10.34.36.57 TCP_MISS/200 475 GET http://www.google-analytics.com/__utm.gif? - DIRECT/209.85.146.139 image/gif 1313683343.494 1 10.34.36.57 TCP_MISS/200 5391 GET http://privilege.ft.com/sites/all/themes/ftprivilege/img/footer-bg.png csov FIRST_UP_PARENT/127.0.0.1 image/png 1313683343.499 0 10.34.36.57 TCP_DENIED/407 5011 GET http://privilege.ft.com/sites/all/themes/ftprivilege/img/deal-submit-button. png - NONE/- text/html 1313683343.554 4 10.34.36.57 TCP_MISS/200 5364 GET http://privilege.ft.com/sites/all/themes/ftprivilege/img/deal-submit-button. png csov FIRST_UP_PARENT/127.0.0.1 image/png 1313683367.376 28 10.34.36.57 TCP_DENIED/407 3886 CONNECT registration.ft.com:443 - NONE/- text/html 1313683367.428 0 10.34.36.57 TCP_DENIED/407 4236 CONNECT registration.ft.com:443 - NONE/- text/html 1313683368.013 214 10.34.36.57 TCP_DENIED/407 4134 GET http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsK8Var42Wv2Ct%2BB0CP yO0igBZwgQUpe8LEc7AQQOjSmWQSLIc4FctfUcCEFRg9%2Fk0x%2FWn%2Fudlr2CmcNo%3D - NONE/- text/html 1313683368.067 0 10.34.36.57 TCP_DENIED/407 4484 GET http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsK8Var42Wv2Ct%2BB0CP yO0igBZwgQUpe8LEc7AQQOjSmWQSLIc4FctfUcCEFRg9%2Fk0x%2FWn%2Fudlr2CmcNo%3D - NONE/- text/html 1313683368.140 0 10.34.36.57 TCP_DENIED/407 4404 GET http://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsK8Var42Wv2Ct%2BB0CP yO0igBZwgQUpe8LEc7AQQOjSmWQSLIc4FctfUcCEFRg9%2Fk0x%2FWn%2Fudlr2CmcNo%3D - NONE/- text/html 1313683368.408 174 10.34.36.57 TCP_DENIED/407 3744 GET http://svrsecure-g2-crl.verisign.com/SVRSecureG2.crl - NONE/- text/html 1313683368.461 0 10.34.36.57 TCP_DENIED/407 4094 GET http://svrsecure-g2-crl.verisign.com/SVRSecureG2.crl - NONE/- text/html 1313683368.533 0 10.34.36.57 TCP_DENIED/407 4014 GET http://svrsecure-g2-crl.verisign.com/SVRSecureG2.crl - NONE/- text/html 1313683368.600 1126 10.34.36.57 TCP_MISS/200 3214 CONNECT registration.ft.com:443 csov DIRECT/62.25.103.202 - 1313683368.629 0 10.34.36.57 TCP_DENIED/407 3886 CONNECT registration.ft.com:443 - NONE/- text/html 1313683368.684 0 10.34.36.57 TCP_DENIED/407 4236 CONNECT registration.ft.com:443 - NONE/- text/html 1313683368.811 81 10.34.36.57 TCP_MISS/200 74 CONNECT registration.ft.com:443 csov DIRECT/62.25.103.202 – If I uncheck the proxy settings on Seven/IE8 it goes through, and even when I check it again. I seems that if it had worked once without proxy, it’ll work forever with the proxy…
I spy a bunch of 407 + CONNECT events. Would that happen to be NTLM auth taking place? There is a keep-alive bug (#3213) in Squid-3 CONNECT handling that breaks the NTLM handshake.
NP: tis is where I'd normally say upgrade. But I'm still working on making Windows simply build again :(
Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.14 Beta testers wanted for 3.2.0.10
