[squid-users] IIS Authentication Error

From: Jay Turner <jturner@dont-contact.us>
Date: Fri, 15 Oct 2004 10:38:09 +0800

Hi All,

I have a client who is trying to connect to an IIS website that requires
user authentication. When they bypass the Squid-2.5STABLE2 proxy it works
fine and they are prompted to enter their login details.

When they go through the proxy, which is using the LDAP helper to
authenticate them via Novell, they get the following error returned from the
destination webserver:

==================
You are not authorized to view this page

You do not have permission to view this directory or page using the
credentials
that you supplied because your Web Browser is sending a WWW-Authenticate
header field that the web server is not configured to accept.

...

HTTP Error 401.2 - Unauthorized: Access is denied due to server
configuration.
Internet Information Services (IIS)

==================

I tried adding an acl destination for the site and setting
no_cache deny thesite
http_access allow thesite

to stop the page being cached and allow access to it before Squid requires
Authentication but that didn't resolve it.

Does anyone have any ideas? IIRC isn't there an issue that IIS NTLM
authentication cannot be proxied? Could that be the case here?

Thanks in advance

Regards
Jay Turner

------------------------------------------
EOM

NOTICE - This message contains information intended only
for the use of the addressee named above. It may also be
confidential and/or privileged. If you are not the intended
recipient of this message you are hereby notified that you must
not disseminate, copy or take any action in reliance on it.
All care has been taken to ensure that this message and any
attachments are virus free although we accept no
responsibility for any virus infections caused by receipt
of this message.
Received on Thu Oct 14 2004 - 20:35:52 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Nov 01 2004 - 12:00:02 MST