[squid-users] squid 3.5.27 issue 407 Proxy Authentication Required

[Hery Razakarimanana]

Hi,


I'm trying to implement proxy cache (3.5.27)

*Config*
auth_param negotiate program /usr/lib64/squid/negotiate_wrapper_auth --ntlm
/usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp
--domain=MYDOMAIN --kerberos /usr/lib64/squid/negotiate_kerberos_auth -d -s
GSS_C_NO_NAME
#auth_param negotiate program /usr/lib64/squid/negotiate_wrapper_auth --ntlm
/usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp
--domain=MYDOMAIN --kerberos /usr/lib64/squid/negotiate_kerberos_auth -s
HTTP/sv-proxy
auth_param negotiate children 30
auth_param negotiate keep_alive on

auth_param ntlm program /usr/bin/ntlm_auth --diagnostics
--helper-protocol=squid-2.5-ntlmssp --domain=MYDOMAIN
auth_param ntlm children 30
auth_param ntlm keep_alive off

#acl kerb_auth proxy_auth REQUIRED
acl authenticated proxy_auth REQUIRED
#Definition du réseau qui pourra accéder au Proxy
acl localnet src 192.168.0.0/16

*I run :*
export http_proxy=http://MYDOMAIN <http://mydomain/>'\'mysuser:pass at sv-proxy
:3128
export https_proxy=http://MYDOMAIN <http://mydomain/>'\'
mysuser:pass at sv-proxy:3128

curl -v https://www.google.com
* About to connect() to proxy sv-proxy port 3128 (#0)
*   Trying 192.168.101.7...
* Connected to sv-infra-proxy (192.168.101.7) port 3128 (#0)
* Establish HTTP proxy tunnel to www.google.com:443
* Proxy auth using Basic with user 'MYDOMAIN\myuser'
> CONNECT www.google.com:443 HTTP/1.1
> Host: www.google.com:443
> Proxy-Authorization: Basic
> TlVNRU5cc3ZjLXNxdWlkLWJhdGNoOmJiMEE5UXlrZ3ZvTGxYa3F2bjhH
> User-Agent: curl/7.29.0
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 407 Proxy Authentication Required
< Server: squid/3.5.27
< Mime-Version: 1.0
< Date: Sat, 06 Jul 2019 09:56:41 GMT
< Content-Type: text/html;charset=utf-8
< Content-Length: 3665
< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
< Vary: Accept-Language
< Content-Language: en
< Proxy-Authenticate: Negotiate
< Proxy-Authenticate: NTLM
< X-Cache: MISS from sv-proxy
< X-Cache-Lookup: NONE from sv-proxy:3128
< Via: 1.1 sv-proxy (squid/3.5.27)
< Connection: close
<
* Ignore 3665 bytes of response-body
* Received HTTP code 407 from proxy after CONNECT
* Connection #0 to host sv-proxy left intact
curl: (56) Received HTTP code 407 from proxy after CONNECT

*in cahe log I got :*
WARNING: Unsupported or unconfigured/inactive proxy-auth scheme, 'Basic
TlVNRU5cc3ZjLXNxdWlkLWJhdGNoOmJiMEE5UXlrZ3ZvTGxYa3F2bjhH'

Please what is the issue?

Best regards,
Heri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190706/44b5f41f/attachment-0001.html>