[squid-users] Unable to use NTLM and MSNT authentication

Hi all,
      I have installed squid-2.5.STABLE3-0 from source
rpm on redhat linux 8.0 with the following options,

--enable-basic-auth-helpers="LDAP,NCSA,PAM,SMB,SASL,MSNT,winbind"
 \
   --enable-ntlm-auth-helpers="SMB,winbind" \
  
--enable-external-acl-helpers="ip_user,ldap_group,unix_group,wbinfo_group,winbind_group"
\
   --enable-auth="basic,ntlm" \
   --with-winbind-auth-challenge \
   --enable-useragent-log \
   --enable-referer-log \
   --enable-icmp \

Now I am trying to configure it with NTLM and MSNT
authentication with the windows2000 server test
machine I have without using samba. I want the users
to be authenticated from the PDC. I edited my
squid.conf as follows,

auth_param ntlm program /usr/lib/squid/ntlm_auth -b
galaxy/etroplus.galaxy
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/lib/squid/msnt_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

acl AuthorizedUsers proxy_auth required
http_access allow all AuthorizedUsers

My msntauth.conf file looks like this,

server etroplus.galaxy

But now when I try to browse from the PDC , I cannot
browse. It tries to connect to the requested page for
a long time and then fails. The squid access.log shows
like this,

1059651876.836 54 192.168.0.101 TCP_DENIED/407
1730 GET http://www.google.com/ads/ - NONE/- text/html

Can anyone tells me how to get MSNT and NTLM
authentication? Is it necessary that I should
configure samba too for this and use winbind ? Any
reply would be highly appreciated.

Thanx in advance
Nasirudheen

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
Received on Thu Jul 31 2003 - 05:45:24 MDT