Re: [squid-users] RE: libsmb/ntlmssp.c:ntlmssp_update(334)

Dawie Pretorius wrote:
> Hello Amos
>
> So will the problem be solved when adding the squid_kerb_auth to the squid.conf, so when the client does ask for the Kerberos auth it can be supplied to him?
>

The client seems to be badly broken in attempting to use it anyway, so I
hesitate to guess how it will react.

It's worth a try anyway.

Amos

>
>
> Dawie Pretorius
>
> Dawie Pretorius wrote:
>> Is it possible that someone can get back to me on this issue, thanks
>>
>> Dawie Pretorius
>>
>> Hello
>>
>> Getting this error sometimes in my cache.log:
>>
>> [2010/01/28 14:23:58, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
>> got NTLMSSP command 3, expected 1
>> 2010/01/28 14:25:51| AuthConfig::CreateAuthUser: Unsupported or unconfigured/inactive proxy-auth scheme, ''
>>
>> Gentoo squid-3.0.STABLE19
>
> Hi Dawie,
>
> The "3" and "1" have been explained as the difference between NTLM vs
> Kerberos.
>
> As far as I can tell "3" means Kerberos is being used. "1" is NTLM.
> The ntlm_auth helper only checks NTLM and the squid_kerb_auth helper is
> needed instead for Kerberos.
>
> Looks to me like the client is broken and using Kerberos when offered
> NTLM as the only available auth option.
>
> Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE23
   Current Beta Squid 3.1.0.16