Problem authenticating with Negotiate-NTLM

From: Markus Moeller <huaraz_at_moeller.plus.com>
Date: Sun, 20 Mar 2011 13:22:04 -0000

Hi,

  I try to use my negotiate-wrapper with auth_ntlm and squid-3.2 and see
that the helper returns TT ... and squid logs

2011/03/20 13:08:19.544 kid1| negotiate/negotiateUserRequest.cc(201)
authenticate: need to challenge client
'TlRMTVNTUAACAAAAEgASADAAAAAFgomivxsqHXpxr1kAAAAAAAAAAHQAdABCAAAAVwBJAE4AMgAwADAAMwBSADIAAgASAFcASQBOADIAMAAwADMAUgAyAAEAFABPAFAARQBOAFMAVQBTAEUAMQAxAAQAEgBzAHUAcwBlAC4AaABvAG0AZQADACgAbwBwAGUAbgBzAHUAcwBlADEAMQAuAHMAdQBzAGUALgBoAG8AbQBlAAAAAAA='!

but in the wireshark log I don't see a proxy-authenticate header line to
challenge the client. What could be the reason ?

When I switch to Negotiate-Kerberos everything works.

Attached are the config and log files.

Markus

Received on Sun Mar 20 2011 - 13:23:23 MDT

This archive was generated by hypermail 2.2.0 : Mon Mar 21 2011 - 12:00:04 MDT