Re: [squid-users] Popup login and password box with Winbind authenticators

Paul,

For your client machines, try Tools -> Internet Options -> Advanced and
scroll to the bottom finding an option that says something like Integrated
Authtentication (requires restart), and check that.

Alex

> Greetings again
list...
> I am attempting to get Squid to authenticate usernames against our
> corporate windows 2k AD. So far I have had much luck, but the last step is
> beyond my abilities to resolve. Squid will always request the login and
> password box when IE is launched. Upon typing in the username and pass, the
> user is free to exist within the bounds of the ACL's. However, I would very
> much like IE to use NTLM and not ask.
> I have tried to follow the FAQ as closely as possible...
>
> Using:
> Samba 2.2.6pre2
> Squid2.5pre12
> IE 6
> Win2k SP3
>
> All of the samba parts seem to work find. I can authenticate in cleartext
> and encrypted. Shared secret is fine, and I can retrieve lists of users and
> groups. The usernames incidentally don't have spaces.
> There is one deviation from the FAQ I have noticed however. When I
> use wbinfo -u or -g, there is no Domain\username it is only in Username
> form. The winbind separator is \, but it just doesn't show up. If I just
> enter wbinfo -a username%password it will authenticate anyone on the domain
> properly, so I don't think that is the problem. Also, once I manually
> authenticate it just lists Username in the auth.log. I have seen a couple
> threads about IE6 causing problems, but I have enabled NTLM in the browser.
>
> I am royally stumped on this one. Any help that can be provided is
> greatly appreciated.
>
> --------------------------------------------
> Paul Norris IT Department Technician
> Cunningham Field & Research Service, Inc.
> (386) 677-5644 ext. 216
> paulnorris@cunninghamresearch.com
>
>
>
>
Received on Mon Sep 23 2002 - 12:22:42 MDT