2

This is the conversation:

==> GET http://xy/z HTTP/1.1
<== HTTP/1.0 401 Unauthorized / Proxy-Connection: close

When bypassing Squid (squid/3.0.STABLE6), I get the HTTP basic authentication prompt, as it should.

Is there a specific setting that controls this behaviour, or is this actually a bug?

user27451
  • 1,161
  • 2
  • 11
  • 14
  • I tested `Squid Cache: Version 4.10` and it seems connection is kept alive – Gelldur Aug 05 '21 at 10:18
  • Also please see [this config: persistent_connection_after_error](http://www.squid-cache.org/Versions/v6/cfgman/persistent_connection_after_error.html) – Gelldur Aug 05 '21 at 11:41

1 Answers1

2

I think I found the solution. Squid isn't really HTTP 1.1 compliant and thus intereferes with advanced stuff like persistent connections.

You can see here http://wiki.squid-cache.org/Http11Checklist under 8.1.2 that there is an open issue described as "assume http/1.1 servers will maintain persistent connections even after error responses from the server".

So: server sends 401 => squid closes the connection => BASIC auth doesn't work

Sad but true.

user27451
  • 1,161
  • 2
  • 11
  • 14