[squid-users] squid 3.5.27 issue 407 Proxy Authentication Required

[Hery Razakarimanana]

Amos any news?
I have look into old reports on *TAG_NONE_ABORTED/XXX *according to splice
connection but i don't really understand
Thanks
Heri

On Sun, Jul 7, 2019 at 3:17 AM Hery Razakarimanana <
herinirina.razaka at gmail.com> wrote:

> Hello,
>
> It was working fine.
> I have made comments in my squid.conf then restart and meet new issue.
>
>
>
>
>
> * wget http://perdu.com <http://perdu.com>--2019-07-07 03:13:03--
>  http://perdu.com/ <http://perdu.com/>Resolving sv-proxy (sv-proxy)...
> 127.0.0.1, 192.168.101.7Connecting to sv-proxyg (sv-infra-proxy.numen.mg
> <http://sv-infra-proxy.numen.mg>)|127.0.0.1|:3128... connected.Proxy
> request sent, awaiting response..*.
>
> And it is waiting without response
> In /var/log/squid/access.log I got :
>
>
> *1562458068.026 495171 127.0.0.1 TAG_NONE_ABORTED/000 0 GET
> http://perdu.com/ <http://perdu.com/> - HIER_NONE/- -1562458084.867   8927
> 127.0.0.1 TAG_NONE_ABORTED/000 0 GET http://perdu.com/ <http://perdu.com/>
> - HIER_NONE/- -*
>
> Could you help please?
> Best regards
> Heri
>
>
> On Sat, Jul 6, 2019 at 8:28 PM Hery Razakarimanana <
> herinirina.razaka at gmail.com> wrote:
>
>> I have implemented basic authentication
>>
>> auth_param basic program /usr/lib64/squid/basic_ldap_auth -b
>> "dc=MYDOMAIN,dc=COM" -f "uid=%s" -h ldap.MYDOMAIN.COM
>> auth_param basic children 10
>>
>> After runing curl i got :
>>
>> curl -v https://www.google.com
>> * About to connect() to proxy sv-proxy port 3128 (#0)
>> *   Trying 127.0.0.1...
>> * Connected to sv-proxy (127.0.0.1) port 3128 (#0)
>> * Establish HTTP proxy tunnel to www.google.com:443
>> * Proxy auth using Basic with user 'MYDOMAIN\svc-squid-batch'
>> > CONNECT www.google.com:443 HTTP/1.1
>> > Host: www.google.com:443
>> > Proxy-Authorization: Basic
>> TlVNRU5cc3ZjLXNxdWlkLWJhdGNoOmJiMEE5UXlrZ3TGxYa3F2bjhH
>> > User-Agent: curl/7.29.0
>> > Proxy-Connection: Keep-Alive
>> >
>> < HTTP/1.1 407 Proxy Authentication Required
>> < Server: squid/3.5.27
>> < Mime-Version: 1.0
>> < Date: Sat, 06 Jul 2019 17:18:41 GMT
>> < Content-Type: text/html;charset=utf-8
>> < Content-Length: 3692
>> < X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
>> < Vary: Accept-Language
>> < Content-Language: en
>> < Proxy-Authenticate: Negotiate
>> < Proxy-Authenticate: NTLM
>>
>> *< Proxy-Authenticate: Basic realm="Squid proxy-caching web server"*
>> Authentication problem. Ignoring this.*
>> < X-Cache: MISS from sv-proxy
>> < X-Cache-Lookup: NONE from sv-proxy:3128
>> < Via: 1.1 sv-proxy (squid/3.5.27)
>> < Connection: close
>> <
>> * Received HTTP code 407 from proxy after CONNECT
>> * Connection #0 to host sv-proxy left intact
>> curl: (56) Received HTTP code 407 from proxy after CONNECT
>>
>> What is the issue?  realm in parameter?
>> I have give proxy server before but got the same issue
>>
>> Thanks Ramos
>>
>>
>>
>> On Sat, Jul 6, 2019 at 2:24 PM Amos Jeffries <squid3 at treenet.co.nz>
>> wrote:
>>
>>> On 6/07/19 10:38 pm, Hery Razakarimanana wrote:
>>> >
>>> > Please what is the issue?
>>> >
>>>
>>> Your proxy only accepts Negotiate/Kerberos, Negotiate/NTLM or NTLM
>>> authentication.
>>>
>>>
>>> But you have curl using environment variables containing Basic auth
>>> credentials.
>>>
>>> To solve you will need to either;
>>>
>>> * add Basic auth to the proxy squid.conf
>>>
>>> OR,
>>>
>>> * remove the environment variables and configure the agents like curl to
>>> use NTLM or Negotiate instead.
>>>
>>>
>>> Amos
>>> _______________________________________________
>>> squid-users mailing list
>>> squid-users at lists.squid-cache.org
>>> http://lists.squid-cache.org/listinfo/squid-users
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190707/18c377a8/attachment.html>