[squid-users] ntlm_auth Squid Version 2.5.STABLE4 - SSL wrong password, IE6 Win dows XP

I am using ntlm_auth to authenticate users against an NT 4 domain and squid
Version 2.5.STABLE4 (debian package in testing dist), I have got squid set
up to allow users access if they have a valid account on the NT 4 domain.

This seems to work fine on most machines but, I have a problem whereby when
a user that is running internet explorer 6 on windows XP tries to access an
SSL site, they get prompted to enter their user name and password. We have a
policy that account are locked out after 3 tries, before the user types
anything we find that the user's account is locked out. It seems that XP is
sending the wrong password to squid with SSL sites, though I guess it could
be squid being confused by something that XP sends. Does anybody know what
might be causing this problem? The configure options used to compile it are
below:

Squid Cache: Version 2.5.STABLE4
configure options: --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin
--sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc
--localstatedir=/var/spool/squid --datadir=/usr/share/squid
--enable-async-io --with-pthreads --enable-storeio=ufs,aufs,diskd,null
--enable-linux-netfilter --enable-arp-acl --enable-removal-policies=lru,heap
--enable-snmp --enable-delay-pools --enable-htcp --enable-poll
--enable-cache-digests --enable-underscores --enable-referer-log
--enable-useragent-log --enable-auth=basic,digest,ntlm i386-debian-linux

Thank you

Charlie Grosvenor
charlie.grosvenor@bellandclements.co.uk

________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________
Received on Fri Oct 10 2003 - 07:47:34 MDT