[squid-users] Squid and ntlm authentification for instant messaging

Hi

I am running squid(2.6.stable9) with ntlm authentication and that is
working fine for any http access.

However while I am trying connect any instant messaging (Yahoo
messenger, MSN) through the proxy, connection is getting failed.

Log shows:
[2007/04/12 14:40:39, 1] libsmb/ntlmssp.c:ntlmssp_update(267)
  got NTLMSSP command 3, expected 1
[2007/04/12 14:40:41, 1] libsmb/ntlmssp.c:ntlmssp_update(267)
  got NTLMSSP command 3, expected 1
[2007/04/12 14:40:47, 1] libsmb/ntlmssp.c:ntlmssp_update(267)
  got NTLMSSP command 3, expected 1
[2007/04/12 14:41:12, 1] libsmb/ntlmssp.c:ntlmssp_update(267)
  got NTLMSSP command 3, expected 1
2007/04/12 14:41:15| Preparing for shutdown after 13 requests

(Error logs are somewhat similar to bug 1873 - fixed in squid
2.6.stable8)

Adding more debug statements in src/auth/ntlm/auth_ntlm.c file I have
found:
Sequence is as follows:

Failure case:
authenticateNTLMStart
authenticateNTLMAuthenticateUser: auth state ntlm none
authenticateNTLMAuthenticateUser: Locking auth_user from the connection.
authenticateNTLMAuthenticateUser: need to challenge client
authenticateNTLMAuthenticateUser: auth state ntlm failed
authenticateNTLMHandleReply:: reply = NA NT_STATUS_INVALID_PARAMETER

Success case:
authenticateNTLMAuthenticateUser: auth state ntlm none
authenticateNTLMAuthenticateUser: Locking auth_user from the connection
authenticateNTLMAuthenticateUser: need to challenge client
authenticateNTLMAuthenticateUser: auth state challenge with header
authenticateNTLMHandleReply:: reply = AF suman

However this is working fine with squid 2.5.stable11(old enough)...

Any help will be highly appreciated.

With regards
Suman
Received on Thu Apr 12 2007 - 08:07:28 MDT