Re: squid 3.5.27 issue 407 Proxy Authentication Required

[Hery Razakarimanana <herinirina.razaka@xxxxxxxxx>]

Amos any news?

I have look into old reports on TAG_NONE_ABORTED/XXX according to splice connection but i don't really understand

Thanks

Heri

On Sun, Jul 7, 2019 at 3:17 AM Hery Razakarimanana <herinirina.razaka@xxxxxxxxx> wrote:

Hello,

It was working fine.

I have made comments in my squid.conf then restart and meet new issue.

 wget http://perdu.com
--2019-07-07 03:13:03--  http://perdu.com/
Resolving sv-proxy (sv-proxy)... 127.0.0.1, 192.168.101.7
Connecting to sv-proxyg (sv-infra-proxy.numen.mg)|127.0.0.1|:3128... connected.
Proxy request sent, awaiting response...

And it is waiting without response

In /var/log/squid/access.log I got :

1562458068.026 495171 127.0.0.1 TAG_NONE_ABORTED/000 0 GET http://perdu.com/ - HIER_NONE/- -
1562458084.867   8927 127.0.0.1 TAG_NONE_ABORTED/000 0 GET http://perdu.com/ - HIER_NONE/- -

Could you help please?

Best regards

Heri

On Sat, Jul 6, 2019 at 8:28 PM Hery Razakarimanana <herinirina.razaka@xxxxxxxxx> wrote:

I have implemented basic authentication

auth_param basic program /usr/lib64/squid/basic_ldap_auth -b "dc=MYDOMAIN,dc=COM" -f "uid=%s" -h ldap.MYDOMAIN.COM
auth_param basic children 10

After runing curl i got :

curl -v https://www.google.com
* About to connect() to proxy sv-proxy port 3128 (#0)
*   Trying 127.0.0.1...
* Connected to sv-proxy (127.0.0.1) port 3128 (#0)
* Establish HTTP proxy tunnel to www.google.com:443
* Proxy auth using Basic with user 'MYDOMAIN\svc-squid-batch'
> CONNECT www.google.com:443 HTTP/1.1
> Host: www.google.com:443
> Proxy-Authorization: Basic TlVNRU5cc3ZjLXNxdWlkLWJhdGNoOmJiMEE5UXlrZ3TGxYa3F2bjhH
> User-Agent: curl/7.29.0
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 407 Proxy Authentication Required
< Server: squid/3.5.27
< Mime-Version: 1.0
< Date: Sat, 06 Jul 2019 17:18:41 GMT
< Content-Type: text/html;charset=utf-8
< Content-Length: 3692
< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
< Vary: Accept-Language
< Content-Language: en
< Proxy-Authenticate: Negotiate
< Proxy-Authenticate: NTLM
< Proxy-Authenticate: Basic realm="Squid proxy-caching web server"
* Authentication problem. Ignoring this.
< X-Cache: MISS from sv-proxy
< X-Cache-Lookup: NONE from sv-proxy:3128
< Via: 1.1 sv-proxy (squid/3.5.27)
< Connection: close
<
* Received HTTP code 407 from proxy after CONNECT
* Connection #0 to host sv-proxy left intact
curl: (56) Received HTTP code 407 from proxy after CONNECT

What is the issue?  realm in parameter?

I have give proxy server before but got the same issue

Thanks Ramos

On Sat, Jul 6, 2019 at 2:24 PM Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:

On 6/07/19 10:38 pm, Hery Razakarimanana wrote:
>
> Please what is the issue?
>

Your proxy only accepts Negotiate/Kerberos, Negotiate/NTLM or NTLM
authentication.


But you have curl using environment variables containing Basic auth
credentials.

To solve you will need to either;

* add Basic auth to the proxy squid.conf

OR,

* remove the environment variables and configure the agents like curl to
use NTLM or Negotiate instead.


Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users