Re: [squid-users] Popup login and password box with Winbind authenticators

----- Original Message -----
From: "Paul Norris" <PaulNorris@CunninghamResearch.com>
To: "'Jerry Murdock'" <jmurdock@itraktech.com>;
<squid-users@squid-cache.org>
Sent: Monday, September 23, 2002 8:35 PM
Subject: RE: [squid-users] Popup login and password box with Winbind
authenticators

> Could this have something to do with the fact that I don't see
> <Domain><Winbindseparator><username> when I do wbinfo -u or -g? I don't
> really have a clue, I'm just thinking out loud.
>
No, that sounds normal.

Fire up ethereal or the like and look at the conversation between squid and
IE.

The first response from squid should be a 407 Proxy Authentication Required
and include a header line like:
Proxy-Authenticate: NTLM

Jerry

A sample conversation for an initial request from one of my test machines:

IE:
===
GET http://www.cisco.com/ HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword,
application/pdf, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; AIRF; .NET
CLR 1.0.3705)
Host: www.cisco.com
Proxy-Connection: Keep-Alive

Squid Response:
==============
HTTP/1.0 407 Proxy Authentication Required
Server: Squid/2.5-DEVEL
Mime-Version: 1.0
Date: Tue, 24 Sep 2002 01:27:38 GMT
Content-Type: text/html
Content-Length: 961
Expires: Tue, 24 Sep 2002 01:27:38 GMT
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Squid proxy-caching web server"
X-Cache: MISS from bsd.itraktech.com
Proxy-Connection: close
Received on Mon Sep 23 2002 - 19:47:05 MDT