[squid-users] Squid 3.1 supporting NTLMv1 and v2 using negotiate

From: Rob Price <robdprice_at_hotmail.com>
Date: Mon, 21 Jun 2010 19:11:17 +1000

I have authentication via negotiate_kerb_auth working a charm, with a
secondary helper for basic via ntlm_auth

This works a charm. However the negotiate_kerb_auth helper only supports
NTLMv2 and this causes some applications, mostly Web Conferencing
applications, Live Meeting, WebEx etc, to fail authentication due to sending
NTLMv1.
I could add the sites involved to the "no auth" destinations, but would much
rather get the authentication working correctly.

I have seen some speculation that there may be a new negotiate helper in the
pipeline that will support both v1 and v2, is this true?
If not, has anybody got 3.1 working with negotiate and a combination of
other helpers with such applications?

Thanks

Rob
Received on Mon Jun 21 2010 - 09:11:27 MDT

This archive was generated by hypermail 2.2.0 : Mon Jun 21 2010 - 12:00:03 MDT