Hi guys, I'm upgrading a squid install from 3.1.23 to squid 3.3.5 and have noticed that I can no longer authenticate using NTLM in IE10 when I have a machine that is not on the domain (domain machines work fine). I have attached snippets from traces for the working and non-working versions (I have the full pcap files if anyone wants them) and interestingly enough I also see the following in the log file while I try to authenticate: 2013/05/29 17:38:38.211 kid1| auth_ntlm.cc(247) fixHeader: Sending type:40 header: 'NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomi4lhV hRyKPsAAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAb AADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA==' 2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(48) authenticated: user not fully authenticated. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(338) authenticate: header NTLM TlRMTVNTUAADAAAAGAAYAKAAAAAgASABuAAAABoAGgBYAAAAF AAUAHIAAAAaABoAhgAAAAAAAADYAQAABYKIogYBsR0AAAAPsR9j27hinFMvBkj5IH2Tw2EAbABhAG4AVwBpAG4ANwBQAEMALQBQAEMAYQBsAGEAbgBXAGkAbgA3AF AAQwBBAEwAQQBOAFcASQBOADcAUABDAC0AUABDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJjy5Usdqn2l447R9Fg3VaoBAQAAAAAAAHU+7aeLXM4B95Bx7FEGHp8 AAAAAAgAIAEEATABCAEEAAQAaAFYAQQBOAEkATABMAEEALQBTAFEAVQBJAEQABAAUAGEAbABiAGEALgBsAG8AYwBhAGwAAwAwAHYAYQBuAGkAbABsAGEALQBzAHEA dQBpAGQALgBhAGwAYgBhAC4AbABvAGMAYQBsAAgAMAAwAAAAAAAAAAEAAAAAIAAA58qwv/jdnQsmog5mklTMWUvkbFB3qPJx0C9nbroc9VcGAAQABAAAAAoAEAAAA AAAAAAAAAAAAAAAAAAACQAiAEgAVABUAFAALwAxADcAMgAuADIAMQAuADUAMAAuADIAMQAAAAAAAAAAAA==. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(342) authenticate: This is a new checklist test on:local=172.21.50.21:3128 remot e=172.21.123.30:63719 FD 10 flags=1 2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(48) authenticated: user not fully authenticated. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(48) authenticated: user not fully authenticated. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:38:38.213 kid1| UserRequest.cc(66) start: auth_user_request '0x1321be0' 2013/05/29 17:38:38.213 kid1| UserRequest.cc(95) module_start: credentials state is '3' 2013/05/29 17:38:38.215 kid1| UserRequest.cc(233) HandleReply: helper: '0x1321d48' sent us 'NA NT_STATUS_NO_SUCH_USER' 2013/05/29 17:38:38.215 kid1| UserRequest.cc(118) releaseAuthServer: releasing NTLM auth server '0x1321d48' 2013/05/29 17:38:38.215 kid1| UserRequest.cc(324) HandleReply: Failed validating user via NTLM. Error returned 'NT_STATUS_NO_SUCH_USER' But I know the user is valid... and I've just notice if I now refresh the page I get authenticated fine: 2013/05/29 17:46:02.102 kid1| auth_ntlm.cc(247) fixHeader: Sending type:40 header: 'NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomiSUlUxVy56ZsAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA==' 2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(48) authenticated: user not fully authenticated. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(338) authenticate: header NTLM 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. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(342) authenticate: This is a new checklist test on:local=172.21.50.21:3128 remote=172.21.123.30:63720 FD 10 flags=1 2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(48) authenticated: user not fully authenticated. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(48) authenticated: user not fully authenticated. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(73) valid: Validating Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(93) valid: Validated. Auth::UserRequest '0x1321be0'. 2013/05/29 17:46:02.104 kid1| UserRequest.cc(66) start: auth_user_request '0x1321be0' 2013/05/29 17:46:02.104 kid1| UserRequest.cc(95) module_start: credentials state is '3' 2013/05/29 17:46:03.654 kid1| UserRequest.cc(233) HandleReply: helper: '0x1321d48' sent us 'AF ALBA\ntlmauth2' 2013/05/29 17:46:03.656 kid1| UserRequest.cc(118) releaseAuthServer: releasing NTLM auth server '0x1321d48' 2013/05/29 17:46:03.656 kid1| UserRequest.cc(289) HandleReply: Successfully validated user via NTLM. Username 'ALBA\ntlmauth2' 2013/05/29 17:46:03.656 kid1| UserRequest.cc(291) HandleReply: authenticated user ALBA\ntlmauth2 I guess this is probably a bug, should I raise it in bugzilla? Is there anything else that is needed? Cheers, -- Michael Graham <mgraham@xxxxxxxxx>
Stream 3: GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com DNT: 1 Proxy-Connection: Keep-Alive HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:01 GMT Content-Type: text/html Content-Length: 3402 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== DNT: 1 Proxy-Connection: Keep-Alive Host: www.example.com HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:01 GMT Content-Type: text/html Content-Length: 3500 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomiGYv9JBguRSEAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA== X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com DNT: 1 Proxy-Connection: Keep-Alive Proxy-Authorization: NTLM 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 HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:01 GMT Content-Type: text/html Content-Length: 4080 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== Proxy-Connection: Keep-Alive DNT: 1 HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:24 GMT Content-Type: text/html Content-Length: 3500 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com DNT: 1 Proxy-Connection: Keep-Alive Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:30 GMT Content-Type: text/html Content-Length: 3500 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== Proxy-Connection: Keep-Alive DNT: 1 HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:34 GMT Content-Type: text/html Content-Length: 3500 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://www.example.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Connection: Keep-Alive DNT: 1 Host: www.squid-cache.org HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:34 GMT Content-Type: text/html Content-Length: 3551 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://www.example.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Connection: Keep-Alive DNT: 1 Host: www.squid-cache.org Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:34 GMT Content-Type: text/html Content-Length: 3649 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://www.example.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Connection: Keep-Alive Host: www.squid-cache.org Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== DNT: 1 HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:42 GMT Content-Type: text/html Content-Length: 3649 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://www.example.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Connection: Keep-Alive Host: www.squid-cache.org DNT: 1 Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:46 GMT Content-Type: text/html Content-Length: 3649 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive <snip> GET http://www.squid-cache.org/Artwork/SN.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://www.example.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Connection: Keep-Alive Host: www.squid-cache.org Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== DNT: 1 HTTP/1.1 407 Proxy Authentication Required Server: squid/3.3.5 Mime-Version: 1.0 Date: Wed, 29 May 2013 16:20:50 GMT Content-Type: text/html Content-Length: 3649 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.1 vanilla-squid (squid/3.3.5) Connection: keep-alive
Stream 20: GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com DNT: 1 Proxy-Connection: Keep-Alive HTTP/1.0 407 Proxy Authentication Required Server: squid/3.1.23 Mime-Version: 1.0 Date: Wed, 29 May 2013 15:54:38 GMT Content-Type: text/html Content-Length: 3403 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.0 vanilla-squid (squid/3.1.23) Connection: close <snip!> Stream 21: GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== DNT: 1 Proxy-Connection: Keep-Alive Host: www.example.com HTTP/1.0 407 Proxy Authentication Required Server: squid/3.1.23 Mime-Version: 1.0 Date: Wed, 29 May 2013 15:54:38 GMT Content-Type: text/html Content-Length: 3501 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomi/+6uiRiGwwAAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA== X-Cache: MISS from vanilla-squid Via: 1.0 vanilla-squid (squid/3.1.23) Connection: keep-alive <body> GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com DNT: 1 Proxy-Connection: Keep-Alive Proxy-Authorization: NTLM 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 HTTP/1.0 407 Proxy Authentication Required Server: squid/3.1.23 Mime-Version: 1.0 Date: Wed, 29 May 2013 15:54:38 GMT Content-Type: text/html Content-Length: 4079 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM Proxy-Authenticate: Basic realm="Internet via XXXXW" X-Cache: MISS from vanilla-squid Via: 1.0 vanilla-squid (squid/3.1.23) Connection: close <snip> Stream 22: GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Host: www.example.com Proxy-Authorization: NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw== Proxy-Connection: Keep-Alive DNT: 1 HTTP/1.0 407 Proxy Authentication Required Server: squid/3.1.23 Mime-Version: 1.0 Date: Wed, 29 May 2013 15:54:56 GMT Content-Type: text/html Content-Length: 3501 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en-us Proxy-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADAAAAAFgomirbXsFhuGeSQAAAAAAAAAAHoAegA4AAAAQQBMAEIAQQACAAgAQQBMAEIAQQABABoAVgBBAE4ASQBMAEwAQQAtAFMAUQBVAEkARAAEABQAYQBsAGIAYQAuAGwAbwBjAGEAbAADADAAdgBhAG4AaQBsAGwAYQAtAHMAcQB1AGkAZAAuAGEAbABiAGEALgBsAG8AYwBhAGwAAAAAAA== X-Cache: MISS from vanilla-squid Via: 1.0 vanilla-squid (squid/3.1.23) Connection: keep-alive <snip> GET http://www.example.com/ HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) Accept-Encoding: gzip, deflate Proxy-Authorization: NTLM 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 Host: www.example.com Proxy-Connection: Keep-Alive DNT: 1 HTTP/1.0 302 Moved Temporarily Date: Wed, 29 May 2013 15:59:39 GMT Location: http://example.iana.org Server: BigIP Content-Length: 0 X-Cache: MISS from vanilla-squid Via: 1.0 vanilla-squid (squid/3.1.23) Connection: keep-alive <hurrah!>
