Hi, In message <_A3815@delegate-en.ML_> on 08/30/07(14:51:03) I wrote: |In message <_A3814@delegate-en.ML_> on 08/30/07(09:29:49) |you "Jim Scharp" <p4yhabdyi-mykgh42sj6tw.ml@delegate.org> wrote: | |I have two delegate instances, one forwarding http requests to another over | |an encrypted tunnel to proxy http requests: | | | |Web browser, proxies traffic to localhost --> delegateA:4000 --> SSL tunnel | |over Internet --> delegateB:3825 --> original request to Web Server --> | |contents sent back over SSL tunnel... | | | |1. delegateA is running 9.6.3 default Windows binary on a WindowsXP box | |cmd line: | |C:\delegate\delegate -P4000 STLS=fsv ADMIN="IEUser@" | |SERVER=tcprelay://delegateB_hostname:3825 | | | |2. delegateB is running 9.6.3 on linux, with default compile options | |cmd line: | |/usr/bin/delegated -P3825/admin STLS=fcl AUTH="admin::xxxx:yyyy" ADMIN=" | |xxx@xxx" PERMIT="*:*:*" RELAY=proxy,delegate SERVER=http LOGFILE="" | |PROTOLOG="" ERRORLOG="" | | | |It works, but not very well. About 50% of connections are refused with the | |following error: *** Non-Admin request for a non-HTTP server ***, even when | |I login to delegateB successfully with admin credentials. | |When I refresh a random number of times, eventually the page will display, | |though sometimes it's missing CSS or certain images. | | | |Any idea whether my command line is inappropriate or whether this could be a | |bug? | |You should specify the port dedicated for admin. in the delegateB as this |for example: | | -P3825,3826/admin I'm reminded that I thought it should be permitted as a normal usage to share a single port between users and administration like in your case. So I'll modify the code as the enclosed patch. Cheers, Yutaka -- 9 9 Yutaka Sato <pfqcabdyi-mykgh42sj6tw.ml@delegate.org> http://delegate.org/y.sato/ ( ~ ) National Institute of Advanced Industrial Science and Technology _< >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan Do the more with the less -- B. Fuller *** ../dist/src/delegate9.7.0-pre1/src/http.c Mon Aug 27 15:43:48 2007 --- src/http.c Thu Aug 30 15:43:44 2007 *************** *** 9924,9941 **** --- 9924,9944 ---- return 0; } int isNonAdminRequest(Connection *Conn,FILE *fc,FILE *tc){ CStr(req,32); HttpRequest reqx; if( (ClientFlags & PF_ADMIN_SW) == 0 ) return 0; + if( Conn->clif._adminPort == Conn->clif._userPort ) + return 0; + if( DDI_fgetsFromC(Conn,AVStr(req),sizeof(req),fc) == NULL ) return 0; DDI_pushCbuf(Conn,req,strlen(req)); decomp_http_request(req,&reqx); if( strncmp(reqx.hq_url,"/-/",3) == 0 ){ return 0; } fprintf(tc,"HTTP/1.0 500 Non-Admin request\r\n");