We have a user with a valid Windows account that cannot acces Internet across the proxy. For every site, he received an ICAP error that should translate like :
Webwasher has receives an ICAP error while communicating with an ICAP server.
This user is member of 608 groups, the ASCII version of the group list is 18 KB.
Can it be realed to this? Any way to increase the group size limit?
PS: This user, until last week was able to use the proxy without problem. So far, this is the only reported case
Ce message a été modifié par: DBO on 03/03/10 16:22:49 CSTCe message a été modifié par: DBO on 03/03/10 16:47:34 CST
That's quite a bit of group memberships, to increase the allowed header size (which this is most likley violating) this can be done under Proxies > HTTP Proxy > Settings > Maximum header length.
The reason this could be occurring is if he is apart of soooo many groups, the proxy will pass a large request to the ICAP server for filtering, and if it is larger than the 'Maximum header length' then it will result in an ICAP error.
If you did ICAP traces for the user this would show how large the X-Authenticated-Group header is.
Yes, it look like that. We have a team that is streamlining all group membership and structure. I will know tomorrow what is the story for this account.