RE: [squid-users] Squid behind one or more ISA Serverswithntlm_auth

From: Amaro Manueljoao \(CI/CSA51-Brg\) <ManuelJoao.Amaro@dont-contact.us>
Date: Mon, 23 Oct 2006 11:40:26 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi again

Here is my conf and the output log.
I tried to open www.google.pt, IE pops-up the authentication window for 2 times.
And reports this error

        Cannot find server or DNS Error
        Internet Explorer

<squid.conf>
http_port 8080
cache_peer proxy.host.com parent 8080 7 default no-query allow-miss login=PASS
acl all src 0.0.0.0/0.0.0.0
http_access allow all
</squid.conf>

<access.log>
1161599804.699 1318 10.32.4.102 TCP_MISS/407 595 GET http://www.google.pt/ - DEFAULT_PARENT/proxy.host.com text/html
</access.log>

<store.log>
1161599804.699 RELEASE -1 FFFFFFFF F1BA72A426A81475235769D8F37919D7 407 -1 -1 -1 text/html 0/0 GET http://www.google.pt/
</store.log>

Any ideas ?
Regards,

João Amaro

- -----Original Message-----
From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
Sent: segunda-feira, 23 de Outubro de 2006 10:31
To: Amaro Manueljoao (CI/CSA51-Brg)
Cc: Squid Users
Subject: RE: [squid-users] Squid behind one or more ISA Serverswithntlm_auth

mån 2006-10-23 klockan 10:18 +0100 skrev Amaro Manueljoao
(CI/CSA51-Brg):

> I'm using this configuration without success
>
> http_port 3128
> cache_peer xxx.xxx.xxx.xxx parent 8080 7 no-query allow-miss no-digest connection-auth=on login=PASS
> auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
> auth_param ntlm children 5
> auth_param ntlm keep_alive off
>
> What's wrong here ?
> Should I disable NTML auth ?

Yes, and any use of auth related acls.

Regards
Henrik

-----BEGIN PGP SIGNATURE-----
Version: SECUDE secure mail 4.0.2.13
Comment: SECUDE Office Security Suite - http://www.secude.com

iQCVAwUBRTycGg1sh+OmTvXzAQIDPQQAvRkRw9GSO/XX75WHzDLWjUsxfox8hwJiKPtvHtn8
v6q6t6a/bTfeuoJVbA7dXVTjatz6pjt0Hj6hdUP9TnUmauvrutHtzW+BqES1oocvzWykj3qV
mbycN+kLKsbF7h9qjg74xm1GNE2Ox2PZ8Yj2vq2RbGVFX4ll8jluYjNx6i4=
=am2b
-----END PGP SIGNATURE-----
Received on Mon Oct 23 2006 - 04:42:08 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Nov 01 2006 - 12:00:04 MST