Re: [SQU] Fw: NTLM authentication, recent logs for Robert Collins

On Fri, 27 Oct 2000, Dr. Michael Weller wrote:

> From my logs (but they are too short for a long term experience) it seems
> the default challenge refresh of 1800 secs would suffice. Anything close
> to or over 40 minutes definitely does not. I'll run with 900 secs for now
> in all installations and see if this removes the last authentication
> failures.

Hmm, seems challengerefresh appears only at min or gcd (-k, -c). With 1h
challenge refresh I got still a few errors (about 1/(1..2 hours)). I'm now
back to default (-k 60, c 1800) but 1 authenticator only and will see how
it behaves.

I think you should definitely make 1 auth default in squid.conf and a
comment warning to change it (for now).

Michael.

P.S.: Any real ideas how to deal with it, rather than circumventing the
bug? Even w/o getting the source from St. Petersburg it might be possible
to snoop on the net connection between an MS-Proxy and a DC and see what
it does.
 

--
Michael Weller: eowmob@exp-math.uni-essen.de, eowmob@ms.exp-math.uni-essen.de,
or even mat42b@spi.power.uni-essen.de. If you encounter an eowmob account on
any machine in the net, it's very likely it's me.
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html