0001664: Some web applications do not have a configurable option to authenticate. This causes problems in the proxy.

ClearFoundation Tracker - ClearOS

View Issue Details

Project

Category

View Status

Date Submitted

Last Update

0001664

ClearOS

app-web-proxy - Web Proxy

public

2014-04-11 09:27

2014-06-25 12:25

Reporter

dloper

Assigned To

user2

Priority

low

Severity

feature

Reproducibility

always

Status

closed

Resolution

duplicate

Platform

OS Version

Product Version

Target Version

6.6.0 Beta 2

Fixed in Version

6.6.0 Beta 2

Summary

0001664: Some web applications do not have a configurable option to authenticate. This causes problems in the proxy.

Description

On sites where authentication is used, some services fail to tie into the NTLM architecture. This can cause repeated site failures despite being globally listed or listed in the default whitelists under the content filter. In the squid logs, this traffic shows up as TCP_DENIED.

Steps To Reproduce

Set up an authentication infrastructure using proxy and content filtration. Set it up so that you can use authentication to browse the internet. Set up a service (like dropbox) that doesn't have authentication mechanisms set or available in the application. Watch the logs produce TCP_DENIEDs.

Additional Information

To implement a fix for this in testing or in development:

http://www.clearcenter.com/support/documentation/clearos_guides/add_whitelist_of_sites_to_proxy_server [^]