[squid-users] NTLM but still got pop-ups /w IE ?

Thanks to Henrik, I got the big picture of squid auth. Now I got this :
- Samba 2.2.8a installed.
- Squid 2.5 Stable 3 running well configured with :
./configure --sysconfdir=/etc/squid --enable-poll --enable-snmp
--enable-auth="ntlm,basic" --enable-basic-auth-helpers="winbind"
--enable-external-acl-helpers="winbind_group,wbinfo_group"
--enable-ntlm-auth-helpers="winbind"

Squid without authentication running well. But when authenticated, the
pop-up asking Username & password always shows up even with IE 6.0.
Something else I missed ?

Regards,

Arief K

----------------- squid.conf -------------------------

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

cache_dir ufs /var/cache/squid 100 16 256

#auth_param basic children 5
#auth_param basic realm Squid proxy-caching web server
#auth_param basic credentialsttl 2 hours

auth_param ntlm program /usr/local/squid/libexec/wb_ntlmauth
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes

auth_param basic program /usr/local/squid/libexec/wb_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

acl AuthorizedUsers proxy_auth REQUIRED
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

http_access allow all AuthorizedUsers
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all

visible_hostname h07mis12

http_reply_access allow all
icp_access allow all

coredump_dir /var/cache
Received on Fri Aug 15 2003 - 03:05:43 MDT