[squid-users] Squid proxying NTLM authentication servers

From: Vinod Patel <vinod@dont-contact.us>
Date: Tue, 27 Sep 2005 19:39:22 +0530

Hi,
I read the squid FAQ's and it says that
  " We cannot proxy connections to a origin server that use NTLM
  authentication".

I am using squid-2.5-STABLE2.

I removed the following code in file client_side.c,
routine: clientBuildReplyHeaders,

    /* Filter unproxyable authentication types */
    if (http->log_type != LOG_TCP_DENIED &&
        (httpHeaderHas(hdr, HDR_WWW_AUTHENTICATE)
             || httpHeaderHas(hdr, HDR_PROXY_AUTHENTICATE))) {

          /* code for removing NTLM headers from reply */
    }

I removed the above code and NTLM auth seems to work for me.
With firefox, it works for both transparent mode as well as proxy mode.
With IE, it works in transparent mode, but does not work in proxy mode.

I don't think this could be that simple???
Please guide me further in right direction.

Rgds,
Vinod Patel
Received on Tue Sep 27 2005 - 08:10:08 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Oct 01 2005 - 12:00:04 MDT