Re: [squid-users] ntlm_auth bug?

Netscape doesn't do NTLM.

You need to configure basic as well as NTLM authentication(2.5 allows both to
be active - not sure how the 2.4 patch works). This will allow squid to use
NTLM for IE clients, and fall back to basic auth for others.

For the basic auth helper, use either MSNT or SMB (or possibly LDAP). I use
SMB as NTLM had compile problems on FreeBSD. NTLM looks a little "lighter" if
it will compile for you. SMB has been working fine though.

Jerry

----- Original Message -----
From: "Klier Rainer" <Rainer.Klier@erl.sbs.de>
To: "'Squid-Users (E-Mail)" <squid-users@squid-cache.org>
Sent: Thursday, November 08, 2001 10:13 AM
Subject: [squid-users] ntlm_auth bug?

> I was playing around a bit with ntlm_auth
> under squid 2.5. Works fine, when I use
> MS IE. I thought, I could probably use it
> too with Netscape, but after giving
> netscape the username and password,
> it runs in an infinite loop, contacting
> squid about 150 times a second.
> I set debug_options to 29,6 and I get
> the following in the cache.log:
>
> 2001/11/07 16:00:16| authenticateValidateUser:
> Auth_user_request was NULL!
> 2001/11/07 16:00:16| authenticateValidateUser:
> Auth_user_request was NULL!
> (VERY often :))
>
> Is this a bug, or is it not possible to do this
> type of auth with netscape?
> Used netscape 4.77 under linux.
>
> Rainer
>
> --
> Rainer Klier, 31802, SBS D ORS CWS BOS 22
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.0 (http://www.geekcode.de)
> GB d- s a C++ U++HIL P+++ L++ E W+++ N++ w--- O- !V t++ R++ tv- b+ D
> G e+++ h r++ y$+++
> -----END GEEK CODE BLOCK-----
>
Received on Thu Nov 08 2001 - 08:40:54 MST