Dear
I’m using HaProxy in order to balance with 2 squids 3.2x connected to
Active Directory with NTLM
The NTLM is correctly forwarded to the Squid.
But in access_log, squid did not write the NTLM session username.
in debug mode, i correctly see NTLM forwarded by HaProxy
eg:
Host: www.google-analytics.com
Proxy-Connection: keep-alive
Proxy-Authorization: NTLM
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
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.11
(KHTML, like Gecko) Chrome/23.0.1271.95 Safari/537.11
Accept: */*
Referer: http://www.google.com
Accept-Encoding: gzip,deflate,sdch
Accept-Language: fr-FR,fr;q=0.8,en-US;q=0.6,en;q=0.4
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
When connecting browsers directly to the squid, usernames are correctly
written to access_log
Why Squid did not write members in access_log when using HaProxy load
balancer ?
Best regards
--
