Article delegate-ja/401 of [1-565] on the server localhost:7119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]

Newsgroups: mail-lists.delegate-ja

[DeleGate-Ja] SSL リバースプロクシで認証後に切断される
09 Apr 2010 03:40:17 GMT Shigeharu Kondo <ppiaabrv6-qa4rnufqboa6.ml@delegate.org>
SYSTEM DESIGN CO., LTD.

 近藤と申します。

 以前から DeleGate により SSL リーバスプロクシを行っている
者です。

 今回、社内の Windows SharePoint Service (IIS) も外から見た
いとの要望があり、設定を追加しましたが、認証後に切断されてし
まいます。

 設定は、以前から使用しているものに MOUNT 先を追加したもの
で、他 (Linux apach 系サーバ) は問題なく認証もできています。

 DeleGate のバージョンも最新 9.9.7 にしてみましたが、現象は
かわりません。
 ログを見ても「切断を検出した」の様にしか読めません。

 なにか、アドバイスいただけないでしょうか
 宜しくお願いいたします。


■立ち上げ時のパラメータ
-P443
SERVER=https
STLS=fcl
MOUNT="/repos/* http://192.168.11.40/repos/* nvserv=svn.aaa.kaisya.co.jp"
MOUNT="/server/* http://192.168.10.25/*"
	:

RELAY=no
RELIABLE='*'
REACHABLE="*.kaisya.co.jp"
LOGFILE=/var/log/delegate/ssl.log
PROTOLOG=''


■/var/log/delegate/ssl.log

04/09 11:11:34.88 [17590] 1+0: -- Fork(SequentialServer): 17573 -> 17590
04/09 11:11:34.88 [17590] 1+1: (0) accepted [28] -@[111.111.111.111]gw2.kaisya.co.jp:54828 (0.003s)(1)
04/09 11:11:34.88 [17590] 1+1: PATH: https://-:443!gw2.kaisya.co.jp:443!gw2.kaisya.co.jp:54828!anonymous@gw2.kaisya.co.jp;1270779094
04/09 11:11:34.88 [17590] 1+1: # SSL record head[16  3  1  0 41] SSL3 8?/70
04/09 11:11:34.88 [17590] 1+1: gethostbyname(-) unknown[0.00s] 
04/09 11:11:34.88 [17590] 1+1: --MOUNT=0[] [111.111.111.111][-][] => []
04/09 11:11:34.88 [17590] 1+1: ## SSLway B7F7BB90 loadSession 0.000032 (0 0) / -1
04/09 11:11:34.88 [17590] 1+1: ## SSLway ## 0.003836 sescache[0] HIT=0 sR=0 cR=1
04/09 11:11:34.88 [17590] 1+1: --pushPFilter (starttls/https) tid=BB90 [26][28] 0 BFEFE754
04/09 11:11:34.88 [17590] 1+1: ## STLS ## IMPLICIT SSL ON 28,28,-1,25
04/09 11:11:34.88 [17590] 1+1: OK: SSL/cl 0.00 0.00/6.00 0.00 0.01 = 0.01
04/09 11:11:34.88 [17590] 1+1: 0.005 CFI_SYNC ready=2 [57/W]
04/09 11:11:34.88 [17590] 1+1: 0.005 CFI_SYNC ready=1 [A]
04/09 11:11:34.97 [17590] 1+1: ## SSLway FCL S-C:0/0 C-S:0/0 CS-EOS
04/09 11:11:34.97 [17590] 1+1: ## left connected but dead [30] <= sslway_dl.c:2912
04/09 11:11:34.97 [17590] 1+1: HTTP empty_request ? from gw2.kaisya.co.jp (1)
04/09 11:11:34.97 [17590] 1+1: disconnected [28] -@[111.111.111.111]gw2.kaisya.co.jp:54828 (0.094s)(0)
04/09 11:11:34.97 [17590] 1+1: CFI-wait 1/1 A0/1 as=0 xpid=-1,-1 0.00
04/09 11:11:34.97 [17590] 1+1: StickyServer done [nonStickyProtocol(https:https:https)] 1 req / 1+0/1 conn / 0 sec
04/09 11:11:34.97 [17590] 1+1: #Sig/CSC finish 300 249 P2 R0 E0 {3 r0 t0} 0/0/1
04/09 11:11:38.04 [17592] 2+0: -- Fork(SequentialServer): 17573 -> 17592
04/09 11:11:38.05 [17592] 2+1: (0) accepted [33] -@[111.111.111.111]gw2.kaisya.co.jp:47754 (0.003s)(1)
04/09 11:11:38.05 [17592] 2+1: PATH: https://-:443!gw2.kaisya.co.jp:443!gw2.kaisya.co.jp:47754!anonymous@gw2.kaisya.co.jp;1270779098
04/09 11:11:38.05 [17592] 2+1: # SSL record head[16  3  1  0 61] SSL3 8?/102
04/09 11:11:38.05 [17592] 2+1: gethostbyname(-) unknown[0.00s] 
04/09 11:11:38.05 [17592] 2+1: --MOUNT=0[] [111.111.111.111][-][] => []
04/09 11:11:38.05 [17592] 2+1: ## SSLway B7F7BB90 loadSession 0.000143 (0 1) / 1
04/09 11:11:38.05 [17592] 2+1: ## SSLway ## 0.001231 sescache[1] HIT=1 sR=0 cR=1
04/09 11:11:38.05 [17592] 2+1: --pushPFilter (starttls/https) tid=BB90 [26][33] 0 BFEFE754
04/09 11:11:38.05 [17592] 2+1: ## STLS ## IMPLICIT SSL ON 33,33,-1,25
04/09 11:11:38.05 [17592] 2+1: OK: SSL/cl 0.00 0.00/6.00 0.00 0.00 = 0.01
04/09 11:11:38.05 [17592] 2+1: 0.003 CFI_SYNC ready=2 [57/W]
04/09 11:11:38.05 [17592] 2+1: 0.003 CFI_SYNC ready=1 [A]
04/09 11:11:38.05 [17592] 2+1: ## SSLway FCL S-C:0/0 C-S:0/0 CS-EOS
04/09 11:11:38.05 [17592] 2+1: ## left connected but dead [29] <= sslway_dl.c:2912
04/09 11:11:38.05 [17592] 2+1: ## left connected but dead [33] <= stls.c:1317
04/09 11:11:38.05 [17592] 2+1: ## left connected but dead [33] <= stls.c:1322
04/09 11:11:38.05 [17592] 2+1: ERROR: SSL/cl disconnected: 1 A 0[33]
04/09 11:11:38.05 [17592] 2+1: disconnected [33] -@[111.111.111.111]gw2.kaisya.co.jp:47754 (0.006s)(0)
04/09 11:11:38.05 [17594] 3+0: -- Fork(SequentialServer): 17573 -> 17594
04/09 11:11:38.05 [17594] 3+1: (1) accepted [32] -@[111.111.111.111]gw2.kaisya.co.jp:59032 (0.002s)(1)
04/09 11:11:38.05 [17594] 3+1: PATH: https://-:443!gw2.kaisya.co.jp:443!gw2.kaisya.co.jp:59032!anonymous@gw2.kaisya.co.jp;1270779098
04/09 11:11:38.05 [17594] 3+1: # SSL record head[16  3  1  0 61] SSL3 8?/102
04/09 11:11:38.05 [17594] 3+1: gethostbyname(-) unknown[0.00s] 
04/09 11:11:38.05 [17592] 2+1: CFI-wait 1/1 A0/1 as=0 xpid=-1,-1 0.00
04/09 11:11:38.05 [17592] 2+1: StickyServer done [nonStickyProtocol(https:https:https)] 1 req / 1+0/2 conn / 0 sec
04/09 11:11:38.05 [17592] 2+1: #Sig/CSC finish 293 220 P2 R0 E0 {3 r0 t0} 0/0/1
04/09 11:11:38.05 [17594] 3+1: --MOUNT=0[] [111.111.111.111][-][] => []
04/09 11:11:38.05 [17594] 3+1: ## SSLway B7F7BB90 loadSession 0.000127 (0 1) / 1
04/09 11:11:38.05 [17594] 3+1: ## SSLway ## 0.001103 sescache[1] HIT=1 sR=0 cR=1
04/09 11:11:38.05 [17594] 3+1: --pushPFilter (starttls/https) tid=BB90 [26][32] 0 BFEFE754
04/09 11:11:38.05 [17594] 3+1: ## STLS ## IMPLICIT SSL ON 32,32,-1,25
04/09 11:11:38.05 [17594] 3+1: OK: SSL/cl 0.00 0.00/6.00 0.00 0.00 = 0.01
04/09 11:11:38.05 [17594] 3+1: 0.003 CFI_SYNC ready=2 [57/W]
04/09 11:11:38.05 [17594] 3+1: 0.003 CFI_SYNC ready=1 [A]
04/09 11:11:38.06 [17594] 3+1: Proxy: host=gw2.kaisya.co.jp; User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729); DIRECT
04/09 11:11:38.06 [17594] 3+1: HCKA:[0] Keep-Alive; host=gw2.kaisya.co.jp; (User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729))
04/09 11:11:38.06 [17594] 3+1: REQUEST - GET /server/sites/XXXXX/ HTTP/1.1^M
04/09 11:11:38.06 [17594] 3+1: *** /server/sites/XXXXX/ => http://192.168.10.25/sites/XXXXX/ ***
04/09 11:11:38.06 [17594] 3+1: REQUEST +M http://192.168.10.25/sites/XXXXX/ HTTP/1.1^M
04/09 11:11:38.06 [17594] 3+1: *** /server/sites/XXXXX/ => http://192.168.10.25/sites/XXXXX/ ***
04/09 11:11:38.06 [17594] 3+1: PATH> http://192.168.10.25:80!gw2.kaisya.co.jp:443!gw2.kaisya.co.jp:59032!anonymous@gw2.kaisya.co.jp;1270779098
04/09 11:11:38.06 [17594] 3+1: REQUEST = [http://192.168.10.25:80/] GET /sites/XXXXX/ HTTP/1.1^M
04/09 11:11:38.06 [17594] 3+1: CACHE hostname: 192.168.10.25 -> server.aaa.kaisya.co.jp
04/09 11:11:38.06 [17594] 3+1: [0.00,-1][HTTP cache-NONE] /var/delegate/cache/http/server.aaa.kaisya.co.jp/sites/XXXXX/=
04/09 11:11:38.06 [17594] 3+1: [0.00,-1][HTTP cache-NONE] /var/delegate/cache/http/server.aaa.kaisya.co.jp/sites/XXXXX/=
04/09 11:11:38.06 [17594] 3+1: XHost: (0,0,1) 192.168.10.25 <= gw2.kaisya.co.jp
04/09 11:11:38.06 [17594] 3+1: ConnectToServer connected [23] {192.168.10.25:80 <- 192.168.0.250:55826} [0.001s]
04/09 11:11:38.06 [17594] 3+1: willSTLS_SV[http]: ServerFlags=8000 BFEFE754
04/09 11:11:38.06 [17594] 3+1: HTTP => (192.168.10.25:80) GET /sites/XXXXX/ HTTP/1.1^M
04/09 11:11:38.06 [17594] 3+1: HTTP error request: GET /sites/XXXXX/ HTTP/1.1^M
04/09 11:11:38.06 [17594] 3+1: HTTP error status: 401 Unauthorized
04/09 11:11:38.06 [17594] 3+1: HTTP error header: Server: Microsoft-IIS/7.0^M
04/09 11:11:38.06 [17594] 3+1: HTTP error header: WWW-Authenticate: NTLM^M
04/09 11:11:38.06 [17594] 3+1: HTTP error header: X-Powered-By: ASP.NET^M
04/09 11:11:38.06 [17594] 3+1: HTTP error header: MicrosoftSharePointTeamServices: 12.0.0.6421^M
04/09 11:11:38.06 [17594] 3+1: HTTP error header: Date: Fri, 09 Apr 2010 02:11:36 GMT^M
04/09 11:11:38.06 [17594] 3+1: HTTP error header: Content-Length: 0^M
04/09 11:11:38.06 [17594] 3+1: Guessed Content-Type:text/html http://192.168.10.25:80/sites/XXXXX/
04/09 11:11:38.06 [17594] 3+1: HTTP error header: Content-Type: text/html^M
04/09 11:11:38.06 [17594] 3+1: #HT11 SERVER ver[HTTP/1.1] conn[]
04/09 11:11:38.06 [17594] 3+1: HTTP error header: ^M
04/09 11:11:38.06 [17594] 3+1: HTTP/1.1 401 Content-{Type:text/html Encoding:[/] Leng:0} KA:1/1 Server:Microsoft-IIS/7.0
04/09 11:11:38.06 [17594] 3+1: putMIMEmsg: Content-Length: 0 -> 0 (226 - 226) []
(UNIX) 11:11:38.063 [17594] closed-4[32 -1][23 23 23 -1 -1/32 32 32]relayResp http.c:6646
04/09 11:11:38.06 [17594] 3+1: HTTP transmitted: 205head+0/0body=>0txt+0bin->0/0, 6i/0o/0f/0.0 -----
04/09 11:11:38.06 [17594] 3+1: rcode=-10005 unlink /var/delegate/cache/http/server.aaa.kaisya.co.jp/sites/XXXXX/=#LOADING (205)
04/09 11:11:38.06 [17594] 3+1: ## SSLway FCL S-C:284/1 C-S:475/1 SC-EOS
04/09 11:11:38.06 [17594] 3+1: #HT11 1 putServ(25/26/23) 192.168.10.25:80
04/09 11:11:38.06 [17594] 3+1: CACHE hostname: 192.168.10.25 -> server.aaa.kaisya.co.jp
04/09 11:11:38.07 [17594] 3+1: HCKA:[0] closed -- s:bad status: -401
04/09 11:11:38.07 [17594] 3+1: ## tcCLOSED fc=32 FromC=-1 ToC=-1 CS=-1
11:11:38[17594][17594]18E0 0/1/0/1 ##Xfflush(-1) suppressed <= _-fcloseFILE2.c:10
04/09 11:11:38.07 [17594] 3+1: disconnected [32] -@[111.111.111.111]gw2.kaisya.co.jp:59032 (0.016s)(0)
04/09 11:11:38.08 [17594] 3+1: --- thread_wait(B7F7BB90,300) EXIT 0.014
04/09 11:11:38.08 [17594] 3+1: CFI-wait 1/1 A0/1 as=1 xpid=-1,-1 0.00
04/09 11:11:53.27 [17573] 3+0: AcceptByMain: locked out*1/0 by Sticky*1 2/2
04/09 11:11:53.27 [17594] 3+2: (1) accepted [15] -@[111.111.111.111]gw2.kaisya.co.jp:54082 (0.000s)(1)
04/09 11:11:53.27 [17594] 3+2: PATH: https://-:443!gw2.kaisya.co.jp:443!gw2.kaisya.co.jp:54082!anonymous@gw2.kaisya.co.jp;1270779113
04/09 11:11:53.27 [17594] 3+2: # SSL record head[16  3  1  0 61] SSL3 8?/102
04/09 11:11:53.27 [17594] 3+2: --MOUNT=0[] [111.111.111.111][-][] => []
04/09 11:11:53.27 [17594] 3+2: ## SSLway B7F7BB90 loadSession 0.000058 (0 1) / 1
04/09 11:11:53.27 [17594] 3+2: ## SSLway ## 0.000809 sescache[1] HIT=2 sR=0 cR=1
04/09 11:11:53.27 [17594] 3+2: --pushPFilter (starttls/https) tid=BB90 [30][15] 0 BFEFE754
04/09 11:11:53.27 [17594] 3+2: ## STLS ## IMPLICIT SSL ON 15,15,-1,29
04/09 11:11:53.27 [17594] 3+2: OK: SSL/cl 0.00 0.00/6.00 0.00 0.00 = 0.00
04/09 11:11:53.27 [17594] 3+2: 0.002 CFI_SYNC ready=2 [57/W]
04/09 11:11:53.27 [17594] 3+2: 0.002 CFI_SYNC ready=1 [A]
04/09 11:11:53.27 [17594] 3+2: Proxy: host=gw2.kaisya.co.jp; User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729); DIRECT
04/09 11:11:53.27 [17594] 3+2: HCKA:[0] Keep-Alive; host=gw2.kaisya.co.jp; (User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729))
04/09 11:11:53.27 [17594] 3+2: REQUEST - GET /server/sites/XXXXX/ HTTP/1.1^M
04/09 11:11:53.27 [17594] 3+2: *** /server/sites/XXXXX/ => http://192.168.10.25/sites/XXXXX/ ***
04/09 11:11:53.27 [17594] 3+2: REQUEST +M http://192.168.10.25/sites/XXXXX/ HTTP/1.1^M
04/09 11:11:53.27 [17594] 3+2: *** /server/sites/XXXXX/ => http://192.168.10.25/sites/XXXXX/ ***
04/09 11:11:53.27 [17594] 3+2: PATH> http://192.168.10.25:80!gw2.kaisya.co.jp:443!gw2.kaisya.co.jp:54082!anonymous@gw2.kaisya.co.jp;1270779113
04/09 11:11:53.27 [17594] 3+2: REQUEST = [http://192.168.10.25:80/] GET /sites/XXXXX/ HTTP/1.1^M
04/09 11:11:53.27 [17594] 3+2: Authorization: Dont-Read/Write-Cache ON
04/09 11:11:53.27 [17594] 3+2: CACHE hostname: 192.168.10.25 -> server.aaa.kaisya.co.jp
04/09 11:11:53.27 [17594] 3+2: XHost: (0,0,1) 192.168.10.25 <= gw2.kaisya.co.jp
04/09 11:11:53.28 [17594] 3+2/0/1: #HT11 1 getServ 15.2s(15.2s)*1 SERVER REUSE (25/26/-1) [192.168.10.25:80] 192.168.10.25 [8000 8000 8000]
04/09 11:11:53.28 [17594] 3+2/0/1: ## ignore empty Authorization []
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error request: GET /sites/XXXXX/ HTTP/1.1^M
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error status: 401 Unauthorized
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error header: Content-Type: text/html; charset=us-ascii^M
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error header: Server: Microsoft-HTTPAPI/2.0^M
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error header: WWW-Authenticate: NTLM TlRMTVNTUAACAAAACAAIADgAAAAFgomi3Vr5R4FP3XQAAAAAAAAAAMwAzABAAAAABgByFwAAAA9TAEQARgBLAAIACABTAEQARgBLAAEAEABTADAAMgA1AFQAMgAxADAABAAqAGYAdQBrAGEAZwBhAHcAYQAuAHMAZAAtAG4AZQB0AC4AYwBvAC4AagBwAAMAPABzADAAMgA1AHQAMgAxADAALgBmAHUAawBhAGcAYQB3AGEALgBzAGQALQBuAGUAdAAuAGMAbwAuAGoAcAAFACoAZgB1AGsAYQBnAGEAdwBhAC4AcwBkAC0AbgBlAHQALgBjAG8ALgBqAHAABwAIANGd7gSK18oBAAAAAA==^M
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error header: Date: Fri, 09 Apr 2010 02:11:52 GMT^M
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error header: Content-Length: 341^M
04/09 11:11:53.28 [17594] 3+2/0/1: #HT11 SERVER ver[HTTP/1.1] conn[]
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP error header: ^M
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP/1.1 401 Content-{Type:text/html Encoding:[/] Leng:341} KA:1/1 Server:Microsoft-HTTPAPI/2.0
04/09 11:11:53.28 [17594] 3+2/0/1: ####Gzip [0.000278] - 341 => 275 [29=>30]
04/09 11:11:53.28 [17594] 3+2/0/1: putMIMEmsg: Content-Length: 341 -> 275 (878 - 603) [gzip]
04/09 11:11:53.28 [17594] 3+2/0/1: #CEcl put Content-Encoding:gzip
(UNIX) 11:11:53.280 [17594] closed-4[15 -1][25 26 -1 -1 -1/15 15 15]relayResp http.c:6646
04/09 11:11:53.28 [17594] 3+2/0/1: HTTP transmitted: 546head+341/341body=>0txt+0bin->275/275, 7i/2o/0f/0.0 ---z-
04/09 11:11:53.28 [17594] 3+2/0/1: ## SSLway FCL S-C:947/1 C-S:553/1 SC-EOS
04/09 11:11:53.28 [17594] 3+2/0/1: #HT11 2 putServ(23/27/-1) 192.168.10.25:80
04/09 11:11:53.28 [17594] 3+2/0/1: HCKA:[0] closed -- s:bad status: -401
04/09 11:11:53.28 [17594] 3+2/0/1: ## tcCLOSED fc=15 FromC=-1 ToC=-1 CS=-1
11:11:53[17594][17594]18E0 0/1/1/2 ##Xfflush(-1) suppressed <= _-fcloseFILE2.c:10
04/09 11:11:53.28 [17594] 3+2/0/1: disconnected [15] -@[111.111.111.111]gw2.kaisya.co.jp:54082 (0.010s)(0)
04/09 11:11:53.29 [17594] 3+2/0/1: --- thread_wait(B7F7BB90,300) EXIT 0.013
04/09 11:11:53.29 [17594] 3+2/0/1: CFI-wait 2/2 A0/2 as=2 xpid=-1,-1 0.00
04/09 11:12:23.29 [17594] 3+2/0/1: StickyServer done [timeout] 2 req / 2+0/3 conn / 45 sec
04/09 11:12:23.31 [17594] 3+2/0/1: clearServ: 192.168.10.25:80 [-1][0/0]
04/09 11:12:23.31 [17594] 3+2/0/1: #Sig/CSC finish 1302 1330 P2 R0 E0 {13 r0 t0} 0/0/2


以上

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V