2010/6/22 Xiaoqiang Hu xhu@redhat.com:
thanks for your advice.
I've inspected your pcap file. There is nothing wrong there. It could occur that the credentials are wrong, just it. The function "www_authenticate()" returns a different negative integer code depending on the cause of the failure (wrong nonce, wrong user...). You can log the return code of such function by using "xlog" including the value of $rc (return code of the last called function).
Anyhow try to register the same UAC without the previous proxy so you can check if the password is correct or not.