Re: [squid-users] squid proxy for W2K active directoty users

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 07 Feb 2003 09:52:41 +0100

According to people who knows these things a lot better than me (I have
only seen W2K AD for about 5 minutes.. never installed it) the NTLM
support is separate from mixed/native mode, and you select if the AD
domain is to support NTLM when you first create the directory.

NTLM is required for mixed mode, but does not in itself require mixed
mode.

Regards
Henrik

jschmidt@buhler.com wrote:

> Point Number 3 is making me wonder again. I thought that I had users
> authenticating against my win2k native mode domain, but then I realized,
> that the
> only reason they were able to authenticate seems to be because of a trust
> set up with a windows NT4 server and my win2k domain. This book makes
> a point of saying that NTLM authentication is only possible if your win2k
> server is running in mixed mode, and mine are all running native mode.
> There is
> a conflict of info here, and I wonder if you or anybody else has more
> info, or possible a link to microsoft that could expand on this. I can't
> bring this into
> production until I know exactly what's going on.
>
> (PS. I think you and others are doing a great job answering questions on
> this list)
>
> -jamie-
Received on Fri Feb 07 2003 - 01:54:20 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:13:16 MST