RE: [squid-users] Popup login and password box with Winbind authe nticators

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm sorry I think I was unclear. The server is running on debian
with a 2.4.19 kernel. The clients are win2k sp3 with ie6sp1. The
password prompt asks for username and password only and states
Firewall: IP
Realm: squid proxy caching web server
Username:
Password:

If I enter the domain username and pass, I get auth...

- -----Original Message-----
From: Jerry Murdock [mailto:jmurdock@itraktech.com]
Sent: Monday, September 23, 2002 2:48 PM
To: Paul Norris; squid-users@squid-cache.org
Subject: Re: [squid-users] Popup login and password box with Winbind
authenticators

What client OS?

What password dialog are you getting(does it include a Domain
prompt)?

Jerry

- ----- Original Message -----
From: "Paul Norris" <PaulNorris@CunninghamResearch.com>
To: <squid-users@squid-cache.org>
Sent: Monday, September 23, 2002 2:06 PM
Subject: [squid-users] Popup login and password box with Winbind
authenticators

> Greetings again list...
> I am attempting to get Squid to authenticate usernames against our
> corporate windows 2k AD. So far I have had much luck, but the last
> step
is
> beyond my abilities to resolve. Squid will always request the
> login and password box when IE is launched. Upon typing in the
> username and pass,
the
> user is free to exist within the bounds of the ACL's. However, I
> would
very
> much like IE to use NTLM and not ask.
> I have tried to follow the FAQ as closely as possible...
>
> Using:
> Samba 2.2.6pre2
> Squid2.5pre12
> IE 6
> Win2k SP3
>
> All of the samba parts seem to work find. I can authenticate in
> cleartext and encrypted. Shared secret is fine, and I can retrieve
> lists of users
and
> groups. The usernames incidentally don't have spaces.
> There is one deviation from the FAQ I have noticed however. When I
> use wbinfo -u or -g, there is no Domain\username it is only in
> Username form. The winbind separator is \, but it just doesn't
> show up. If I just enter wbinfo -a username%password it will
> authenticate anyone on the
domain
> properly, so I don't think that is the problem. Also, once I
> manually authenticate it just lists Username in the auth.log. I
> have seen a couple threads about IE6 causing problems, but I have
> enabled NTLM in the
browser.
>
> I am royally stumped on this one. Any help that can be provided is
> greatly appreciated.
>
> --------------------------------------------
> Paul Norris IT Department Technician
> Cunningham Field & Research Service, Inc.
> (386) 677-5644 ext. 216
> paulnorris@cunninghamresearch.com
>

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPY9iwzRI6EQFFv63EQI+6QCff67SiRL3CJoMRCoZaa+jVfonAckAn3BL
82DPUZ+SQYawoPXMzT314thL
=lKI2
-----END PGP SIGNATURE-----
Received on Mon Sep 23 2002 - 12:54:23 MDT