Re: [SQU] Paging Robert Collins

On Wed, 25 Oct 2000, Robert Collins wrote:

> Sorry for the lack of response... I have been thinking however...
>
> One of your errors - the SetUpX errir is from your DC, yes.
> the problem is getting the DC to reuse the challenge issued before the
> comms error. Kinkie is looking into this with Thomas Goebel who has a
> similar, more reproducible problem. (Check the list for a patch to
> nrtlm/auth/modules/NTLMSSP.)

OK will have a look.

> IE should always start under your windows domain credentials. If it starts
> under a local machine account the NTLMSSP will never be able to authenticate
> the user as there will be no DC <- local machine trust account

While you are in generally true that IE should always start under your
windows domain credentials, it is still possible to start IE under a local
machine account. Noticing squid does not accept these, IE will then prompt
for a domain account to be used. If you enter a valid account, domain
password triple here, it DOES work. (this is useful if people dial into
the net with a ras server from home and want to use the proxy).

> housekeeping as a potential issue? Could be - Kinkie do you want to stick
> your oar in here?
> (Kinkie has done all the helper programming to date..)

I now have a second installation which shows the same 'sporadic' &
annoying authentication requests but where I can easier restart squid with
different options and apply patches.

It seems frequency of these prompts depends somehow on the amount of
stress to squid and/or the DC. Even more, however, it seems to occur if
the internet (or whatever is behind squid) is slow!!

Could it be an odd timing issue? Like squid doing the authentication
handshake too slow and IE times out and gives the authentication prompt?

Is there anything else I can do to help you? Enable specific debugging
options? I'll try with the ones you sent me already for the time being.

Michael.

--
Michael Weller: eowmob@exp-math.uni-essen.de, eowmob@ms.exp-math.uni-essen.de,
or even mat42b@spi.power.uni-essen.de. If you encounter an eowmob account on
any machine in the net, it's very likely it's me.
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html