For a start, make sure you upgrade to a STABLE version of Squid. PRE
releases are meant for testing only, and immediately became obsolete
when 2.5.STABLE1 was releases.
Second, if you are using the SMB ntlm_auth NTLM helper then make sure
to list multiple login servers. These do not need to be your actual
domain controllers but can be any NT servers in your network. There
is a problem with the SMB protocol when there is many concurrent
users.
It is advicable to use winbind for integrating with the NT domain. It
is not plauged by the same issues as the old SMB NTLM helper. See the
Squid FAQ for details on how to set up winbind for Squid.
Regards
Henrik
On Wednesday 06 November 2002 10.39, pierspad@9online.fr wrote:
> We use SQUID 2.5 PRE8 and NTLM authentication on local proxy which
> is chained with national proxy. Randomly, an authentication pop-up
> appears on IE and we can't access to the requested url. In
> access_log from national proxy SQUID, we just have
> "TCP_DENIED/407". We execute "squid -k reconfigre" and the problem
> disappears. How to resolve it ?
Received on Wed Nov 06 2002 - 03:23:07 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:10 MST