Re: [squid-users] ntlm_auth and basic auth.

From: Filip Ruymen <filip.ruymen@dont-contact.us>
Date: Fri, 21 Dec 2007 14:23:17 +0100

Hello,

here is the configuration I'm using:

auth_param basic program /usr/lib/squid/ncsa_auth /etc/squid/passwd
auth_param basic children 10
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hour
auth_param ntlm program /usr/lib/squid/ntlm_auth eu.ansell.com/brufps1
auth_param ntlm children 10

Both of the authentication ways are working fine on their own.
When I configure them both, the following happens:
On a machine joined on the domain, but logged in as local user, it
asks for a username and password (which is normal expected behaviour).
When I enter the username and password, it asks me over and over again
for the username and password.

I think it's using the ntlm_auth at that time instead of the basic auth.
Is there a way I can change this so that when a local user (not a
domain user) logs on, they have to enter the basic authentication?

This whole system works just fine, when I use a computer that is not
joined to the domain, then I just enter the basic auth username and
password and it goes swiftly and without a problem on the internet.

Thanks for any advice
Filip Ruymen

On 19/12/2007, Adrian Chadd <adrian@creative.net.au> wrote:
> On Wed, Dec 19, 2007, Filip Ruymen wrote:
> > Hello all,
> >
> > Here is my problem.
> > I have configured squid to do authentication by ntlm which works fine.
> > My problem at the moment is that external users (not from our company)
> > need to have access to the internet too. I want to implement some kind
> > of basic authentication in supplement of the ntlm authentication.
> >
> > But I don't have an idea on how to do this.
> > Any advice would be fine.
>
> You can have a basic and ntlm helper section in Squid. Just setup
> basic authentication as per the large amount of documentation out
> there on the internet.
>
>
>
> Adrian
>
>

-- 
Vriendelijke Groeten
Filip Ruymen
Received on Fri Dec 21 2007 - 06:23:23 MST

This archive was generated by hypermail pre-2.1.9 : Tue Jan 01 2008 - 12:00:02 MST