| sun_hcl@rediffmail.com 2005-04-13, 5:50 pm |
|
We have a web service hosted on a Domain Controller, deployed on IIS.
Access to this service requires separate windows authentication. This
means that user has to enter "username, password and domainname" to
access the web service. Note that this information is different from
the standard squid authentication.
Now, if we try to access this service with Squid authentication
disabled (as is the case after 5:30 pm for 3128 port users), then squid
passes "username, password and domainname" to the web service and
everything works well.
IIS log: 2005-04-13 13:20:23 10.112.6.79 GET
/_wmcs/licensing/license.asmx - 80 p2pdrmntd\rohit 203.200.70.152
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+Crazy+Browser+1.0.5;+.NET+CLR+1.1.4322)
200 0 0 [Note: domainname and username passed successfully to IIS in
this case]
But if we try to access this service with Squid authentication enabled,
then squid does not pass this information to the IIS.
IIS log: 2005-04-13 13:20:51 10.112.6.79 GET
/_wmcs/licensing/license.asmx - 80 - 203.200.70.152
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+Crazy+Browser+1.0.5;+.NET+CLR+1.1.4322)
401 2 2148074254 [Note: domainname and username are not passed to IIS
in this case]
a) Please mention whether this is in default behaviour of proxy servers
with authentication enabled?
b) Further, please mention whether this can be configured so that
"username, domainname" can be passed to IIS even with proxy
authentication enabled?
Regards,
Sunil Virmani
|