Thank you guys for helping me out I reinstalled MSNT, configured it properly
according the notes. It works perfect in combination with NTLM!
Maybe a tip! Since I installed samba on my squidbox, reporting of netbios
errors has been drastically decreased!!!
Thanks!
> -----Original Message-----
> From: Pedro Calvário (Ext_Enh)
> [mailto:Pedro.Calvario.Ext_Enh@lis2.siemens.pt]
> Sent: 02 October 2001 12:34
> To: Squid-Users (E-mail)
> Subject: [squid-users] MSNT & NTLM
>
>
>
> In squid2.4 i think there was a problem with msnt... better
> get the latest
> source of msnt at sourceforge...
>
> Our proxy now works with NTLM and MSNT authentication, with
> automatic authentication for iexplorer and manual
> authentication for the
> other browsers (...)
>
> ###################################################################
> I've compiled Squid 2.5DEV with the following options:
>
> ./configure --enable-async-io --enable-icmp --enable-delay-pools
> --enable-auth=ntlm,basic
> make all
> make install
>
> Then I've compiled NTLM and MSNT...
>
> cd /opt/squid-head.../src/auth/basic/helpers/MSNT/
> make; make install
> cd /opt/squid-head.../src/auth/ntlm/helpers/NTLMSSP/
> make; make install
> ####################################################################
> In squid.conf...
>
> acl mynet src xxx.xxx.xxx.xxx/255.255.255.0
> acl password proxy_auth REQUIRED
>
> auth_param ntlm program /usr/local/squid/libexec/ntlm_auth -b
> DOMAIN/PDC
> DOMAIN/BDC
> auth_param ntlm children 9
> auth_param ntlm max_challenge_reuses 0
> auth_param ntlm max_challenge_lifetime 2 minutes
> auth_param basic program /usr/local/squid/libexec/msnt_auth
> auth_param basic children 4
> auth_param basic realm Squid 2.5DEV
> auth_param basic credentialsttl 1 hour
>
> http_access allow mynet password
> http_access deny all
> ####################################################################
> This was a very small sample of squid.conf!
> In NTLM Authentication you put your PDC and BDCs in squid.conf
> In MSNT Authentication you have to add your PDC and BDCs to the msnt
> configuration file (msntauth.conf).
>
>
> Com os melhores cumprimentos,
> Pedro Calvário
> Tel. +351 21 416 7136
> IC ICS IS - Systems Administrator
> Pedro.Calvario.Ext_Enh@lis2.siemens.pt
>
Received on Tue Oct 02 2001 - 07:52:32 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:02:35 MST