RE: [squid-users] pop up authentication prompts

From: Plant, Dean <dean.plant_at_roke.co.uk>
Date: Tue, 24 Feb 2009 09:52:24 -0000

Plant, Dean wrote:
> nick.apostolou_at_au.abnamro.com wrote:
>> Hi,
>>
>> Anyone got any suggestions on my authentication prompt problems with
>> NTLM authentication?
>>
>> I've also got a test box which was build with a tar ball of the
>> squid and samba directories which authenticates with no problem and
>> does not give any errors in the cache.log.
>>
>> Regards
>> Nick Apostolou
>> IT Infrastructure | ABN AMRO Bank Australia/NZ
>> Ph: +61 2 8259 5330 | Fax: +61 2 8259 5440 | Mobile: + 61 401 709 007
>> email: nick.apostolou_at_au.abnamro.com
>
> Try the squid_kerb_auth module. We are running 2.6.x and we have
> suffered the same random pop-ups on NTLM, adding Kerberos
> authentication to the top of the auth configuration fixes the random
> pop-ups on IE 7 and Firefox. IE 6 does not support Kerberos so leave
> NTLM in your configuration if you have this browser on site. XP users
> will also suffer Kerberos ticket renewal issues if your users leave
> their machines on overnight and XP is not patched to SP3.
>

Just reread over my notes and IE6 *is* supposed to support kerb
authentication. We just had issues with it's reliability in testing so
left in NTLM to ensure that if kerb_auth failed it could drop back to
NTLM.
Received on Tue Feb 24 2009 - 09:53:00 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 25 2009 - 12:00:01 MST