[squid-users] RE: NTLM problems

Using NTLMSSP.
Oh, and yes, in cache.log:
2001/06/11 14:25:18| authenticateNTLMDirection: called before NTLM
Authenticate!. Report a bug to squid-dev.

PS: this is last CVS that's currently available on www.squid.cache.org

-----Original Message-----
From: Robert Collins [mailto:robert.collins@itdomain.com.au]
Sent: Monday, June 11, 2001 2:27 PM
To: Niksa Franceschi
Cc: squid-users@squid-cache.org
Subject: Re: NTLM problems

----- Original Message -----
From: "Niksa Franceschi" <n.franceschi@vipnet.hr>
To: <robert.collins@itdomain.com.au>
Sent: Monday, June 11, 2001 10:22 PM
Subject: NTLM problems

> Hi!
>
> Hope you don't mind for asking this directly to you :)

The best place to ask squid-related problems is the squid-users list.

> Anyway, I'm still having some prolems with NTLM.
>
> I re-installed squid on another machine (Linux), with version
> squid-head-200106102302.
>
> It compiled OK, and it works. However, I get lots of TCP_DENIED
> lines in log when using NTLM, and every little, as a result of that, I
> get pop-up window in IE to enter username/password/domain,
> and this makes it impossible to put it in production environment.
>
> Do you have any ideas how could I fix this? (AFAIK, this is
> supposed to happen only first time user is authenticated with NTLM,
> and it should be nly reported in log - not so user falls back to
> basic authentication).

It happens on every connection. That means ~ every 10 requests in my
experience. The user shouldn't notice however.

> If you need any parts of logs, etc... feel free to ask.
> .. since I'd really like to get this NTLM stuff to work OK :)

cache.log may have some hints - is there anything unusual there. You
also haven't indicated your configuration - are you using fake_auth or
NTLMSSP ?

Have you looked in the squid-users archives? Several other users have
had this problem, and most have been resolved by recent work, much of
which is only available in the ntlm branch from sourceforge. NTLM is not
production ready unfortunately, we are working hard on getting it there.

Rob

> Best regards,
> Niksa Franceschi
>
Received on Mon Jun 11 2001 - 06:29:28 MDT