[squid-users] User failing to authenticate over NTLM

Running SquidNT 2.6 STABLE 16 since yesterday and everything is running
smoothly. You must be member of global domain group X to authenticate,
using NTLM and the user details of the currently logged on user.

However, we have a new user on the system. He has been added into the
relevant group and I've confirmed on the DCs that replication has
occurred, yet whenever he attempts to access a page he gets a "you are
not authorised to access this page" page.

I've checked the access log and see a lot of lines which look like

1190708486.534 0 191.9.222.107 TCP_DENIED/407 1840 GET
http://www.microsoft.com/isapi/redir.dll? - NONE/- text/html
1190708486.565 0 191.9.222.107 TCP_DENIED/407 2086 GET
http://www.microsoft.com/isapi/redir.dll? - NONE/- text/html
1190708486.752 187 191.9.222.107 TCP_DENIED/403 1510 GET
http://www.microsoft.com/isapi/redir.dll? domain\user NONE/- text/html

I had him change his password in case the machine was using a cached
password and it was out-of-sync with the domain, but the problem
remains.

Unsure how to proceed, the permissions look fine and the NTLM
authentication is working for everyone else.

Paul Cocker
IT Systems Administrator
IT Security Officer

01628 81(6647)

TNT Post (Doordrop Media) Ltd.
1 Globeside Business Park
Fieldhouse Lane
Marlow
Bucks
SL7 1HY

TNT Post is the trading name for TNT Post UK Ltd (company number: 04417047), TNT Post (Doordrop Media) Ltd (00613278), TNT Post Scotland Ltd (05695897),TNT Post North Ltd (05701709) and TNT Post South West Ltd (05983401). Emma's Diary and Lifecycle are trading names for Lifecycle Marketing (Mother and Baby) Ltd (02556692). All companies are registered in England and Wales; registered address: 1 Globeside Business Park, Fieldhouse Lane, Marlow, Buckinghamshire, SL7 1HY.
Received on Tue Sep 25 2007 - 04:33:30 MDT