Re: [squid-users] Squid 3.1 supporting NTLMv1 and v2 using negotiate

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Mon, 21 Jun 2010 14:18:38 +0200

mån 2010-06-21 klockan 19:11 +1000 skrev Rob Price:
> I have authentication via negotiate_kerb_auth working a charm, with a
> secondary helper for basic via ntlm_auth
>
> This works a charm. However the negotiate_kerb_auth helper only supports
> NTLMv2 and this causes some applications, mostly Web Conferencing
> applications, Live Meeting, WebEx etc, to fail authentication due to sending
> NTLMv1.

squid_kerb_auth do not support NTLM at all, only Kerberos.

Samba ntlm_auth supports NTLM version 1 & 2, plus Basic auth.

Your can run Squid with

Basic -> ntlm_auth
NTLM -> ntlm_auth
Negotiate -> squid_kerb_auth

which should cover pretty much all HTTP clients.

Regards
Henrik
Received on Mon Jun 21 2010 - 12:18:42 MDT

This archive was generated by hypermail 2.2.0 : Mon Jun 21 2010 - 12:00:03 MDT