Re: [squid-users] Kerberos and NTLM authentication

From: Brett Lymn <brett.lymn_at_baesystems.com>
Date: Thu, 16 May 2013 10:42:15 +0930

On Wed, May 15, 2013 at 10:00:18PM -0300, Carlos Defoe wrote:
> As far as i know, the only auth mech that will prompt for password is
> the basic one, so you're not enabling one per time.
>

I believed that IE will prompt credentials when using NTLM
iff the machine is not part of the domain. It also seems that it will
prompt if the proxy is configured for kerberos and basic auth but the
machine is not part of the domain so kerberos won't work, in this case
the authentication never succeeds (hence why I suggested turning off
IWA). Not sure if this behaviour is a bug or desired behaviour.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."
Received on Thu May 16 2013 - 01:12:24 MDT

This archive was generated by hypermail 2.2.0 : Fri May 17 2013 - 12:00:06 MDT