NTLM woes

From: Kinkie <kinkie-dev@dont-contact.us>
Date: Tue, 15 Jul 2003 17:11:55 +0200

A problem with squid's winbind-NTLM has been caught: it is
possible to limit via security policies the workstations an user can log on
to. Squid doesn't pass to winbind the workstation name (which is passed
along in the "request" or "phase 1" NTLM dialogue) and thus such configured
sites will fail their NTLM authentication with an error of "invalid
workstation".

This message is meant to be for knowledge-sharing only, and food for
thought towards implementing proper NTLMv2 support.

-- 
	kinkie (kinkie-squid [at] kinkie [dot] it)
	Random fortune, unrelated to the message:
Harriet's Dining Observation:
	In every restaurant, the hardness of the butter pats
	increases in direct proportion to the softness of the bread.
Received on Tue Jul 15 2003 - 09:12:01 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:20:16 MST