[squid-users] Problems with applets

From: Robson Paniago de Miranda <Robsonm@dont-contact.us>
Date: Mon, 15 Mar 2004 09:25:06 -0300

Hi

I configured ntlm-auth and basic-auth in my squid proxy, and I´m unable to
download any applet, via http or https. I searched the archives and could
not find anything about this problem.
Did I do something wrong in my config files?

The relevant part of my squid.conf is

auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 10
auth_param basic realm Internet Proxy
auth_param basic credentialsttl 2 hours

http_access allow AuthorizedUsers
http_access deny all

I am using Fedora Core 1 (Samba 3.0.2 and squid-2.5.STABLE3).

Other than this problems with applets, it is working ok. I noticed that
disabling ntlm authentication solves the problem (I get the applet prompting
me the proxy user and password). With NTLM enabled, the applet simply fails
to load, and I get the following exception in Java Console:

java.io.IOException: Unable to tunnel through proxy. Proxy returns "HTTP/1.0
400 Bad Request" at
sun.net.www.protocol.http.HttpURLConnection.doTunneling(Unknown Source)
         at
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.setProxiedClie
nt(Unknown Source)
         at
sun.net.www.protocol.https.PluginDelegateHttpsURLConnection.superConnect(Unk
nown Source) at
sun.net.www.protocol.https.PluginDelegateHttpsURLConnection.connect(Unknown
Source) at
sun.net.www.protocol.https.PluginDelegateHttpsURLConnection.getInputStream(U
nknown Source)
         at
sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown
Source) at
sun.plugin.net.protocol.http.HttpUtils.followRedirects(Unknown Source)
         at sun.plugin.cache.CachedJarLoader.isUpToDate(Unknown Source)

Thanks,
---------
    Robson Paniago
Received on Mon Mar 15 2004 - 05:25:14 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:02 MST