Re: [squid-users] error 401 when going via squid ???

From: Kinkie <gkinkie_at_gmail.com>
Date: Thu, 13 Nov 2008 15:03:04 +0100

Could you try a more recent version of squid?
I don't think that 2.6S4 supports proxying content when the server
only offers ntlm authentication

On 11/13/08, Gregory Machin <gdm_at_linuxpro.co.za> wrote:
> Yes I would assume that the issue is related to "Integrated Microsoft
> Windows Authentication" (a.k.a. NTLM) or something M$ cooked up
>
> Squid Cache: Version 2.6.STABLE4
> configure options: '--build=i686-redhat-linux-gnu'
> '--host=i686-redhat-linux-gnu' '--target=i386-redhat-linux-gnu'
> '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr'
> '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc'
> '--includedir=/usr/include' '--libdir=/usr/lib'
> '--libexecdir=/usr/libexec' '--sharedstatedir=/usr/com'
> '--mandir=/usr/share/man' '--infodir=/usr/share/info'
> '--exec_prefix=/usr' '--bindir=/usr/sbin'
> '--libexecdir=/usr/lib/squid' '--localstatedir=/var'
> '--datadir=/usr/share' '--sysconfdir=/etc/squid' '--enable-epoll'
> '--enable-snmp' '--enable-removal-policies=heap,lru'
> '--enable-storeio=aufs,coss,diskd,null,ufs' '--enable-ssl'
> '--with-openssl=/usr/kerberos' '--enable-delay-pools'
> '--enable-linux-netfilter' '--with-pthreads'
> '--enable-ntlm-auth-helpers=SMB,fakeauth'
> '--enable-external-acl-helpers=ip_user,ldap_group,unix_group,wbinfo_group'
> '--enable-auth=basic,digest,ntlm'
> '--enable-digest-auth-helpers=password'
> '--with-winbind-auth-challenge' '--enable-useragent-log'
> '--enable-referer-log' '--disable-dependency-tracking'
> '--enable-cachemgr-hostname=localhost' '--enable-underscores'
> '--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,YP,getpwnam,multi-domain-NTLM,SASL'
> '--enable-cache-digests' '--enable-ident-lookups' '--with-large-files'
> '--enable-follow-x-forwarded-for' '--enable-wccpv2'
> '--enable-fd-config' '--with-maxfd=16384' 'CFLAGS=-fPIE -Os -g -pipe
> -fsigned-char' 'LDFLAGS=-pie' 'build_alias=i686-redhat-linux-gnu'
> 'host_alias=i686-redhat-linux-gnu'
> 'target_alias=i386-redhat-linux-gnu'
>
> thanks
>
>
> On Wed, Nov 12, 2008 at 8:09 PM, Kinkie <gkinkie_at_gmail.com> wrote:
>> On Wed, Nov 12, 2008 at 3:32 PM, Gregory Machin <gdm_at_linuxpro.co.za>
>> wrote:
>>> Hi
>>
>> Hello Greg,
>>
>>> I have a client that when he tries to access agentdeal.marvel.com the
>>> web server (IIS) does give a login prompt as it should and instead
>>> returns a 401 error.
>>
>> [...]
>>
>>> I get the same problem with our proxy and some other people have this
>>> problem when, behind squid proxy's .
>>
>> What version of Squid, and is IIS trying to offer "Integrated
>> Microsoft Windows Authentication" (a.k.a. NTLM)?
>>
>>
>> --
>> /kinkie
>>
>

-- 
    /kinkie
Received on Thu Nov 13 2008 - 14:03:10 MST

This archive was generated by hypermail 2.2.0 : Wed Nov 19 2008 - 12:00:04 MST