[squid-users] NTLM no_check.pl problems

From: Adam Fernie <adam_fernie@dont-contact.us>
Date: Wed, 17 Nov 2004 09:48:44 +0000

Hi all,

I'm trying to get ntlm_auth working with squid on debian. I have exactly
the same problem as someone described in the mailing lists at
http://www.squid-cache.org/mail-archive/squid-users/200306/0162.html but he
didn't receive a reply.

The no_check.pl receives the hash info but returns to squid "BH
Squid-helper protocol error: unexpected negotiate-request".

I see "authenticateNTLMHandleReply: Error obtaining challenge from helper:
0x8206960. Error returned 'BH Squid-helper protocol error: unexpected
negotiate-request" in the squid logs

The info no_check.pl gets is a YR string over and over which results in ...

domain is xxxxxx
flags is 2718478855
type is negotiate
workstation is xxxxxx

I tried using debian's packaged squid 2.5.7-1 and I downloaded 2.5STABLE7
and compiled with "--enable-auth=ntlm,basic
--enable-ntlm-auth-helpers=no_check".

the configuration lines in squid.conf i used are

acl serendipity proxy_auth REQUIRED
http_access allow serendipity
auth_param ntlm program /path/to/no_check.pl xxxxx
auth_param ntlm children 5
auth_param ntlm use_ntlm_negotiate on

I know my browser (ie6) can do ntlm becasue it works with other proxies.

Is there something wrong with my squid.conf config or the way I configured
and compiled squid?

Any help would be appreciated.

Adam Fernie

-----------------------
Adam Fernie
adam_fernie@hotmail.com
-----------------------

_________________________________________________________________
Stay in touch with absent friends - get MSN Messenger
http://www.msn.co.uk/messenger
Received on Wed Nov 17 2004 - 02:49:02 MST

This archive was generated by hypermail pre-2.1.9 : Wed Dec 01 2004 - 12:00:01 MST