-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 20/12/2014 1:08 p.m., Ahmed Allzaeem wrote: > If you look @ the logs , it seems it recognize a username when it > allow , but when it deny it don’t recognize a username > The 407 is sent because there is nobody authenticated. Nobody authenticated means no username. > Plz look @ logs below : N username here , but I put the username > "b" >> 1418996889.943 2 192.168.1.5 TCP_DENIED/407 4189 GET >> http://google.com/ - NONE/- text/html One of teh 407 is before you put any username in. The second one is after you entered username, but before its fully authenticated. > > > Down here itc MISS , u will see the username "b" after the > google.com >> 1418996897.774 7830 192.168.1.5 TCP_MISS/302 1258 GET >> http://google.com/ b DIRECT/74.125.232.228 text/html > > Compare both of them U will see that user "b" ibcluded when its > allowed > > Im not sure why all of that slow in Kerberos ???!!! You are not using Kerberos. You are using NTLM. Kerberos is part of the "Negotiate" auth scheme. Amos -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJUlDorAAoJELJo5wb/XPRjBjkIANDA0SQMtglLVBj/6reDISIj goYqOQzq4Aw5hP60RcDuIazo//mHTHLLFRof95hmIFCRlo3kHt4aF9EFKQ03gih1 +jvbQ4V2MdZq3+oJiULGhME73DjpZOe9mxhz5FZFMGkOazOd+LIVhipXeoJbK7As BkpCqHnY7N0l4QtvwO85Ea+9jdSC5dws7CIcrN6+J49h7g/J5b7jQRgOdhm+2MoE jg936RA8dM3i/usW7E/CRfdvAS4N7BUXtRsbk88I/YgRJhXRRhpl2FUOa9dCoJXT ol1jibwWjyc1Kjsmn/MZLIBiMrhrBnNOSjSZXldGslEvRN60HptPxetQ4WDgpBw= =L19J -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
