RE: [SQU] help with ntlm authentication needed

> > This looks to me like the ntlm authentication succeeds. So
> I suppose something is wrong with the user syntax !? I did not find
>
> Yep, the first TCP_DENIED sessions are ok, this is a site
> effect of the
> NTLM authentication process.
>
> However, you need to specify user & domain all lower case in the
> squid config. Although case does not matter to windows it
> does to unix.

You are right, but it's actually a bit more complex

NTLM _is_ case-insensitive (BTW: this is what makes NT so
much vulnerable against brute-force password-guessing attacks).
For squid-NTLM, by convention, we decided to lower-case them.
You can have a look at sourceforge's project.
the splay_userauth project handles case-insensitive usernames
cleanly (but it doesn't handle the REQUIRED keyword yet).

-- 
	/kinkie
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html