TR: [squid-users] Squid with webwasher using NTLM authentication

From: NGUYEN DANG LUAN, Eric <eric.nguyen-dang-luan_at_sogeti.com>
Date: Fri, 3 Oct 2008 12:09:35 +0200

-----Message d'origine-----
De : NGUYEN DANG LUAN, Eric
Envoyé : vendredi 3 octobre 2008 10:57
À : 'Malte Schröder'
Objet : RE: [squid-users] Squid with webwasher using NTLM authentication

I'm gonna look how to configure samba. But the thing is I have to use squid as a cache server and webwasher as the proxy + authentication (yeah my boss...).
But I think it's strange that my user can't get register throw squid. Since it only works as a cache, did he change paquets?

Eric NGUYEN DANG LUAN

-----Message d'origine-----
De : Malte Schröder [mailto:maltesch_at_gmx.de]
Envoyé : vendredi 3 octobre 2008 10:47
À : NGUYEN DANG LUAN, Eric
Objet : Re: [squid-users] Squid with webwasher using NTLM authentication

On Fri, 3 Oct 2008 10:40:52 +0200
"NGUYEN DANG LUAN, Eric" <eric.nguyen-dang-luan_at_sogeti.com> wrote:

> Hello,
>
> If I don't find a way to resolve it could be a solution.
> What do you mean by "to be quite limited w.r.t. NTLM"?
>
> And ah yeah I'm running a webwasher (6.8.0 build 3780) software version not the appliance so I have to use a NTLM agent on an other computer which is on the domain.

That's one of the main reasons, it has to rely on a helper installed on a Windows system. For squid a samba installation with domain membership is sufficient. And in Squid you can do all that nice ACL stuff based on user and group-membership :)

>
> Eric NGUYEN DANG LUAN
>
> -----Message d'origine-----
> De : Malte Schröder [mailto:maltesch_at_gmx.de] Envoyé : vendredi 3
> octobre 2008 10:34 À : NGUYEN DANG LUAN, Eric Cc :
> squid-users_at_squid-cache.org Objet : Re: [squid-users] Squid with
> webwasher using NTLM authentication
>
> On Fri, 3 Oct 2008 10:17:29 +0200
> "NGUYEN DANG LUAN, Eric" <eric.nguyen-dang-luan_at_sogeti.com> wrote:
>
> > Hello,
>
> Hi,
>
> >
> > I'm using squid as a cache server working with webwasher (proxy + authentication + webpage filter). Here's the context :
> >                                                    
> > User's computer<---->Squid <----> Webwasher<--->Internet
> >                                              |
> >                                              | Authentication
> >                                              |(Using NTLM)
> >                                             |
> >                                            NTLM
> >                                            Agent
> >
> > When a user is connect directly on webwasher it works. He is authenticated worretly (I can see that thanks to logs).
> > But once I implement a Squid cache server, it doesn't work. My user can't be authenticated.
> >
> > Does anyone has an idea? I'm using squid 2.6 running on a RedHat linux server 5.
> > Right now i'm trying squid 3 but it dosen't seem to work too.
> > I will send a message later to talk about my progress.
>
> I run a similar setup, but I use squid to do the NTLM-authentication.
> Would that be an option for you? I regard the capabilities of WebWasher to be quite limited w.r.t. NTLM when compared to squid.
>
>
> >
> > Regards
> >        
> > Eric NGUYEN DANG LUAN
> >
>
> Greets
> Malte
>
> --
> ---------------------------------------
> Malte Schröder
> MalteSch_at_gmx.de
> ICQ# 68121508
> ---------------------------------------
>


--
---------------------------------------
Malte Schröder
MalteSch_at_gmx.de
ICQ# 68121508
---------------------------------------

Received on Fri Oct 03 2008 - 10:10:02 MDT

This archive was generated by hypermail 2.2.0 : Fri Oct 03 2008 - 12:00:02 MDT