Re: Problem authenticating with Negotiate-NTLM

From: Markus Moeller <huaraz_at_moeller.plus.com>
Date: Sat, 26 Mar 2011 19:06:09 -0000

Can someone confirm this or has an idea what I could check for ?

Thank you
Markus

"Markus Moeller" <huaraz_at_moeller.plus.com> wrote in message
news:im5hrq$vbr$1_at_dough.gmane.org...
>I did some further tests and noticed the following:
>
> 1) IE with squid 3.0 works using my wrapper (See ie-nego-3.0.tgz)
> 2) Polygraph with squid 3.0 fails for ntlm (either via negotiate-ntlm or
> pure ntlm) ( See polygraph-4.3.1-3.0.tgz
> 3) Polygraph with squid 3.2 works for ntlm but fails negotiate-ntlm (See
> polygraph-4.3.1-3.2.tgz)
>
>
> Markus
>
>
> "Markus Moeller" <huaraz_at_moeller.plus.com> wrote in message
> news:im4v3n$374$1_at_dough.gmane.org...
>> Hi,
>>
>> I try to use my negotiate-wrapper with auth_ntlm and squid-3.2 and see
>> that the helper returns TT ... and squid logs
>>
>> 2011/03/20 13:08:19.544 kid1| negotiate/negotiateUserRequest.cc(201)
>> authenticate: need to challenge client
>> 'TlRMTVNTUAACAAAAEgASADAAAAAFgomivxsqHXpxr1kAAAAAAAAAAHQAdABCAAAAVwBJAE4AMgAwADAAMwBSADIAAgASAFcASQBOADIAMAAwADMAUgAyAAEAFABPAFAARQBOAFMAVQBTAEUAMQAxAAQAEgBzAHUAcwBlAC4AaABvAG0AZQADACgAbwBwAGUAbgBzAHUAcwBlADEAMQAuAHMAdQBzAGUALgBoAG8AbQBlAAAAAAA='!
>>
>> but in the wireshark log I don't see a proxy-authenticate header line to
>> challenge the client. What could be the reason ?
>>
>> When I switch to Negotiate-Kerberos everything works.
>>
>> Attached are the config and log files.
>>
>> Markus
>>
>>
>
Received on Sat Mar 26 2011 - 19:06:34 MDT

This archive was generated by hypermail 2.2.0 : Sun Mar 27 2011 - 12:00:05 MDT