Re: [squid-users] NTLM Passthru to ISA2006

From: Dean A. Welbourn <welbournd_at_clannet.co.uk>
Date: Wed, 14 Jan 2009 21:58:12 +0000 (GMT)

Hi,

Sorry forgot to say that bit! Im running Squid 2.7 STABLE 5 on Windows Server 2003 (this is my boss's prefered OS).

Thanks,

Dean

----- Original Message -----
From: "Amos Jeffries" <squid3_at_treenet.co.nz>
To: "Dean A. Welbourn" <welbournd_at_clannet.co.uk>
Cc: squid-users_at_squid-cache.org
Sent: 14 January 2009 20:21:08 o'clock (GMT) Europe/London
Subject: Re: [squid-users] NTLM Passthru to ISA2006

> Hi,
>
> Sorry for the delay ive been out of the office for a few days.
>
> Currently i have the following (i dont have any auth_ settings enabled):
>
> # Define source all
> acl all src all
>
> # Define Safe Ports
> acl SSL_ports port 443
> acl Safe_ports port 80 # http
> acl Safe_ports port 21 # ftp
> acl Safe_ports port 443 # https
> acl Safe_ports port 70 # gopher
> acl Safe_ports port 210 # wais
> acl Safe_ports port 1025-65535 # unregistered ports
> acl Safe_ports port 280 # http-mgmt
> acl Safe_ports port 488 # gss-http
> acl Safe_ports port 591 # filemaker
> acl Safe_ports port 777 # multiling http
> acl CONNECT method CONNECT
>
> # Deny requests to unknown ports
> http_access deny !Safe_ports
>
> # Deny CONNECT to other than SSL ports
> http_access deny CONNECT !SSL_ports
>
> # Allow access to ALL
> http_access allow all
>
> # Define port to listen on
> http_port 8080
>
> # Define cache peer
> cache_peer holly.selby.college parent 8080 7
> proxy-only no-query no-digest login=PASS default
>
> Many thanks,
>
> Dean
>
> ----- Original Message -----
> From: "Amos Jeffries" <squid3_at_treenet.co.nz>
> To: "Dean A. Welbourn" <welbournd_at_clannet.co.uk>
> Cc: "squid-users" <squid-users_at_squid-cache.org>
> Sent: 11 January 2009 21:46:03 o'clock (GMT) Europe/London
> Subject: Re: [squid-users] NTLM Passthru to ISA2006
>
>> Hi,
>>
>> Im trying to implement a Squid proxy with a parent of ISA2006 using
>> integrated NTLM passthru. Should this be possible? I either get three
>> username/password prompts before i get an authorization required error
>> message from the ISA server or just a page can not be displayed error?
>>
>> Any help would be greatly appreciated, this is for a college project.
>>
>> Many thanks,
>>
>> Dean Welbourn
>>
>
> What configuration do you have at present? particularly the auth_*,
> cache_peer, acl, and http_access lines in the order they appear.
>
> Amos
>

Ah right. Squid version?
This is only expected to work in Squid-2.6, 2.7, or 3.1.

Amos
Received on Wed Jan 14 2009 - 21:58:18 MST

This archive was generated by hypermail 2.2.0 : Thu Jan 15 2009 - 12:00:02 MST