Re: [squid-users] Kerberos and NTLM authentication

From: Carlos Defoe <carlosdefoe_at_gmail.com>
Date: Wed, 15 May 2013 14:31:12 -0300

I think the BCP (best current practice) is to use, in sequence:

1) negotiate_wrapper configured with kerberos and ntlm
2) pure ntlm with ntlm_auth
3) one basic auth of your choice

Inserting those three methods in sequence on your squid.conf will do the job.

If you have problems with prompted auth, try inserting the user domain
when authenticating, like "MYDOMAIN\myusername". I've found that
Internet Explorer needs this.
Received on Wed May 15 2013 - 17:31:18 MDT

This archive was generated by hypermail 2.2.0 : Thu May 16 2013 - 12:00:06 MDT