RE: [SQU] NTLM + Netscape?

From: Chemolli Francesco (USI) <ChemolliF@dont-contact.us>
Date: Fri, 17 Nov 2000 16:14:56 +0100

>
> I'm using the NTLM patch and it works fine with IE, but when
> i try using
> netscape i get this in the logfile:

Netscape doesn't support NTLM authentication, it's an IE-only
thing.

> ntlm-auth[20805](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20805](ntlm_auth.c:164): Asking for challenge refresh
> ntlm-auth[20801](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20801](ntlm_auth.c:164): Asking for challenge refresh
> ntlm-auth[20802](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20802](ntlm_auth.c:164): Asking for challenge refresh
> ntlm-auth[20803](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20803](ntlm_auth.c:164): Asking for challenge refresh
> ntlm-auth[20804](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20804](ntlm_auth.c:164): Asking for challenge refresh
> ntlm-auth[20805](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20805](ntlm_auth.c:164): Asking for challenge refresh
> ntlm-auth[20801](ntlm_auth.c:181): housekeeping..
> ntlm-auth[20801](ntlm_auth.c:164): Asking for challenge refresh

This is normal. Disable debugging (it's a #define) in
ntlm_auth_modules/NTLMSSP/ntlm.h (or something like that).

> And a lot of TCP_DENIED in the access.log file.

For basic authentication, you'll get one for each client connecting.
For NTLM authentication, you'll get two for each TCP connection.

> Is there a way for it to fall back on to Basic auth?

Just enable both authenticate_program (to some basic-auth helper)
and authenticate_program_ntlm

-- 
	/kinkie
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Fri Nov 17 2000 - 08:18:47 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:56:26 MST