[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squid-users
Subject:    [squid-users] Re : [squid-users] Re : [squid-users] Re : [squid-users] Anonymous FTP and login pass
From:       Al Batard <albatard78 () yahoo ! fr>
Date:       2011-12-27 12:02:00
Message-ID: 1324987320.45336.YahooMailNeo () web25908 ! mail ! ukl ! yahoo ! com
[Download RAW message or body]

Hi and thanks for your answers,

If I understand this is a bug in the order of ftp authentication ?

Guillaume



----- Mail original -----
De : Amos Jeffries <squid3@treenet.co.nz>
À : squid-users@squid-cache.org
Cc : 
Envoyé le : Mardi 20 Décembre 2011 12h00
Objet : Re: [squid-users] Re : [squid-users] Re : [squid-users] Anonymous FTP and \
login pass url based

On 20/12/2011 9:35 p.m., Henrik Nordström wrote:
> mån 2011-12-19 klockan 23:53 +1300 skrev Amos Jeffries:
> 
> > Do you have a trace from this server when requesting something from the
> > login-required area of the site?
> If the requested URL contains login credentials then anonymous FTP login
> SHOULD NOT be attempted.
> 
> Regards
> Henrik
> 

Sorry. My brain seems to have died :(   see the src/ftp.cc checkAuth() function for \
reality.

Default is username "anonymous" with password from config file (default "Squid@"). \
Which gets overridden by HTTP Basic auth headers (if any). Which then gets overridden \
by URL details (if any).

The final result of all that merging is what gets sent to the server in a single USER \
command. (I was thinking of it incorrectly as the order of several USER commands)

Amos


[prev in list] [next in list] [prev in thread] [next in thread]