[squid-users] NTLM and MSNT Authentication.

"Our proxy now works with NTLM and MSNT authentication, with
automatic authentication for iexplorer and manual authentication for the
other browsers..."

###################################################################
I've compiled Squid 2.5DEV with the following options:

./configure --enable-async-io --enable-icmp --enable-delay-pools
--enable-auth=ntlm,basic
make all
make install

Then I've compiled NTLM and MSNT...

cd /opt/squid-head.../src/auth/basic/helpers/MSNT/
make; make install
cd /opt/squid-head.../src/auth/ntlm/helpers/NTLMSSP/
make; make install
####################################################################
In squid.conf...

acl mynet src xxx.xxx.xxx.xxx/255.255.255.0
acl password proxy_auth REQUIRED

auth_param ntlm program /usr/local/squid/libexec/ntlm_auth -b DOMAIN/PDC
DOMAIN/BDC
auth_param ntlm children 9
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/local/squid/libexec/msnt_auth
auth_param basic children 4
auth_param basic realm Squid 2.5DEV
auth_param basic credentialsttl 1 hour

http_access allow mynet password
http_access deny all
####################################################################
This was a very small sample of squid.conf!
In NTLM Authentication you put your PDC and BDCs in squid.conf
In MSNT Authentication you have to add your PDC and BDCs to the msnt
configuration file (msntauth.conf).

Best Regards
Com os melhores cumprimentos,
Pedro Calvário
IC ICS IS - Systems Administrator
Pedro.Calvario.Ext_Enh@lis2.siemens.pt
Received on Fri Aug 31 2001 - 07:44:50 MDT