[SQU] Cannot cache FTP request.

Hi list,

from the logs IC that this is a typical problem. However, none of the
standard approaches works for me.

I want squid to cache ftp files, even large ones. Say of 700MB should the
need be. However it does not cache any files. Squid is configured to use
an upstream default proxy. In the config file I have:

maximum_object_size 716800 KB
refresh_pattern ^ftp: 1440 20% 10080 override-lastmod
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

---
However, typical access log shows: 
972474705.759  87860 10.1.1.200 TCP_MISS/200 553121 GET
ftp://ftp.compaq.com/pub
/products/servers/supportSoftware/CP000001-000500/CP000233.exe
<user> DEFAULT_PARENT/localhost application/octet-stream [User-Agent:
Mozilla/4.0 (c
ompatible; MSIE 5.5; Windows NT 5.0)\r\nHost:
ftp.compaq.com:21\r\nProxy-Connect
ion: Keep-Alive\r\n] [HTTP/1.0 200 document follows\r\nContent-Type:
application
/octet-stream\r\nContent-Length: 552962\r\n\r]
[...]
972474789.092  76247 10.1.1.200 TCP_MISS/200 553121 GET
ftp://ftp.compaq.com/pub
/products/servers/supportSoftware/CP000001-000500/CP000233.exe
<user> DEFAULT_PARENT/localhost application/octet-stream [User-Agent:
Mozilla/4.0 (c
ompatible; MSIE 5.5; Windows NT 5.0)\r\nHost:
ftp.compaq.com:21\r\nProxy-Connect
ion: Keep-Alive\r\n] [HTTP/1.0 200 document follows\r\nContent-Type:
application
/octet-stream\r\nContent-Length: 552962\r\n\r]
storelog says:
972474705.759 RELEASE -1 FFFFFFFF 2F23CCD2321B1CD6641789F7DD317087  200
-
1        -1        -1 application/octet-stream 552962/552962 GET
ftp://ftp.compa
q.com/pub/products/servers/supportSoftware/CP000001-000500/CP000233.exe
972474789.092 RELEASE -1 FFFFFFFF 4139287B321AF767B09427A8835581B6  200
-
1        -1        -1 application/octet-stream 552962/552962 GET
ftp://ftp.compa
q.com/pub/products/servers/supportSoftware/CP000001-000500/CP000233.exe
Why is squid not storing the ftp file in the cache? If its not clear
already what can I do to find it out and then put in the config to FORCE
squid to cache the ftp files? Even in violation of http protocols. 
I also checked my system clock, its ok.
Thanx in advance,
Michael.
--
Michael Weller: eowmob@exp-math.uni-essen.de, eowmob@ms.exp-math.uni-essen.de,
or even mat42b@spi.power.uni-essen.de. If you encounter an eowmob account on
any machine in the net, it's very likely it's me.
---------- Forwarded message ----------
Date: Wed, 25 Oct 2000 12:11:34 +0200 (MESZ)
From: "Dr. Michael Weller" <eowmob@exp-math.uni-essen.de>
To: Robert Collins <robert.collins@itdomain.com.au>
Cc: squid-users@ircache.net
Subject: Re: [SQU] Paging Robert Collins
On Wed, 25 Oct 2000, Robert Collins wrote:
> Sorry for the lack of response... I have been thinking however...
> 
> One of your errors - the SetUpX errir is from your DC, yes.
>     the problem is getting the DC to reuse the challenge issued before the
> comms error. Kinkie is looking into this with Thomas Goebel who has a
> similar, more reproducible problem. (Check the list for a patch to
> nrtlm/auth/modules/NTLMSSP.)
OK will have a look.
> IE should always start under your windows domain credentials. If it starts
> under a local machine account the NTLMSSP will never be able to authenticate
> the user as there will be no DC <- local machine trust account
While you are in generally true that IE should always start under your
windows domain credentials, it is still possible to start IE under a local
machine account. Noticing squid does not accept these, IE will then prompt
for a domain account to be used. If you enter a valid account, domain
password triple here, it DOES work. (this is useful if people dial into
the net with a ras server from home and want to use the proxy).
> housekeeping as a potential issue? Could be - Kinkie do you want to stick
> your oar in here?
>  (Kinkie has done all the helper programming to date..)
I now have a second installation which shows the same 'sporadic' &
annoying authentication requests but where I can easier restart squid with
different options and apply patches.
It seems frequency of these prompts depends somehow on the amount of
stress to squid and/or the DC. Even more, however, it seems to occur if
the internet (or whatever is behind squid) is slow!!
Could it be an odd timing issue? Like squid doing the authentication
handshake too slow and IE times out and gives the authentication prompt?
Is there anything else I can do to help you? Enable specific debugging
options? I'll try with the ones you sent me already for the time being.
Michael.
--
Michael Weller: eowmob@exp-math.uni-essen.de, eowmob@ms.exp-math.uni-essen.de,
or even mat42b@spi.power.uni-essen.de. If you encounter an eowmob account on
any machine in the net, it's very likely it's me.
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html