Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 2255 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Double request for files from webcid

Placebo

I noticed in the logs of my web-server, running my webcid, that the new Sophos update client (v2.5.8.263) included with 9.7.x does 2 requests for every file.

2011-05-13 11:42:51 xx.xx.xx.xx GET /win/savxp/auto-bpt.ide - 80 - xx.xx.xx.xx SophosAutoUpdate/2.5.8.263+SDDS/1.0+(u="sophosupd"+c="c4fd9cf1-d3c7-4251-969b-d8b045e60698") 401 2 5 0
2011-05-13 11:42:51 xx.xx.xx.xx GET /win/savxp/auto-bpt.ide - 80 sophosupd xx.xx.xx.xx SophosAutoUpdate/2.5.8.263+SDDS/1.0+(u="sophosupd"+c="c4fd9cf1-d3c7-4251-969b-d8b045e60698") 200 0 0 0

The first one without authentication, which gets denied (401) and the second one with authentication.

I have configured authentication so I would expect only a authenticated request. 
Older clients, v2.5.1.212 and v2.5.5.231 don't do this.

I already opened a support ticket for this but I was wondering if anybody else sees this behavior?

:12957


This thread was automatically locked due to age.
Parents
  • 0

    the first request does not contain any authentication

    Yup, I just didn't rule out that if the server offers digest AU would use it in subsequent requests (instead of omitting the credentials).

    To be fair, although the number of requests (almost) doubles neither should these additional requests bring a typical webserver to its knees nor should they cause network congestion. But for sites with slow, high-latency links and HTTP as Primary this has a significant impact. And last but not least - it's not elegant :robotwink:

    Christian

    :13053
Reply
  • 0

    the first request does not contain any authentication

    Yup, I just didn't rule out that if the server offers digest AU would use it in subsequent requests (instead of omitting the credentials).

    To be fair, although the number of requests (almost) doubles neither should these additional requests bring a typical webserver to its knees nor should they cause network congestion. But for sites with slow, high-latency links and HTTP as Primary this has a significant impact. And last but not least - it's not elegant :robotwink:

    Christian

    :13053
Children
No Data