Re: [squid-users] NTLM authehntication

You cannot easily manually test ntlm auth helpers. ntlm expects
Microsoft NTLMSSP messages, not username+password. Only basic auth
helpers can be tested easily manually.

See http://devel.squid-cache.org/ntlm/ for some references to the
NTLMSSP message format.

Regards
Henrik

Mrvka Andreas wrote:
>
> hi squid-users,
>
> I still have a problem concering NTLM auth.
> I already looked through the topics in the mailing-lists for my problem
> >>BH Helper detected protocol error<<
>
> I have SuSE Linux 7.3 with Squid 2.5.PRE10 for i686-pc-linux-gnu...
> compiled with :
> --enable-auth="basic ntlm"
> --enable-ntlm-auth-helpers="SMB winbind no_check"
> --enable-ntlm-fail-open
> --enable-basic-auth-helpers="LDAP SMB SASL getpwnam multi-domain-NTLM winbind MSNT"
>
> and when I start a normal shell and run :
> /usr/local/squid/libexec/ntlm_auth mydomain/mydomain_controller
>
> then it says:
> auth[17248](ntlm_auth.c:180): Adding domain-controller mydomain/mydomain_controller
> ntlm-auth[17248](ntlm_auth.c:453): options processed OK
> myuser mypass
> ntlm-auth[17248](ntlm_auth.c:277): managing request
> ntlm-auth[17248](ntlm_auth.c:283): ntlm authenticator. Got 'myuser mypass' from Squid
> ntlm-auth[17248](ntlm_auth.c:433): sending 'BH Helper detected protocol error' to squid
>
> so, PLEASE why doesn't ntlm_auth work?
>
> hopefully awaiting some help.
> Thank you!
>
> Andreas
Received on Fri Aug 23 2002 - 02:15:55 MDT