Re: NTLM Auth through squid

Lee Shakespeare wrote:

> While I don't expect Squid to know about MS embrace and extend
> protocols, I would have thought the WWW-Authenticate: header could pass
> straight through? Maybe I'm being naive, I haven't exactly found a lot
> of information on how NTLM works over HTTP. :(

Squid passes it thru. The problem is that MS NTLM authentication isn't
HTTP compliant (violates both persistency and message
"independence/completeness")

To my knowledge there is no caching HTTP proxy capable of forwarding MS
NTLM authentication.

--
Henrik Nordstrom
Squid Hacker