Re: [squid-users] NTLM Group Pop up screen

That looks right, but I'm working from memory and won't have access to a
squid box until Monday.

What is access.log showing? What behavior is it giving?

Jerry

----- Original Message -----
From: "Edward Mann" <edward@arctechnology.com>
To: "Jerry Murdock" <jmurdock@itraktech.com>
Cc: "Guido Serassio" <serassio@libero.it>; "Squid Users"
<squid-users@squid-cache.org>
Sent: Wednesday, October 09, 2002 6:04 PM
Subject: Re: [squid-users] NTLM Group Pop up screen

> Here is my setup doing what your suggested.
>
> auth_param ntlm program /usr/lib/squid/wb_ntlmauth
> auth_param ntlm children 5
> auth_param ntlm max_challenge_reuses 0
> auth_param ntlm max_challenge_lifetime 2 minutes
>
> auth_param basic program /usr/lib/squid/wb_auth
> auth_param basic children 5
> auth_param basic realm ChoicePoint Proxy server
> auth_param basic credentialsttl 2 hours
>
> external_acl_type NT_global_group %LOGIN /usr/lib/squid/wb_group
> acl FullAccess external NT_global_group internet
> acl internet proxy_auth REQUIRED
>
> http_access deny !FullAccess internet
> http_access allow internet
>
>
> I think i have something missing here. Can you point it out and tell me?
>
> Thanks for your help.
>
>
> On Wed, 2002-10-09 at 16:12, Jerry Murdock wrote:
> > What are your current http_access entries?
> >
> > Generally, if your proxy_auth acl is part of the denying http_access
line,
> > the login will be offered again. ie:
> >
> > This will go directly to an access denied page:
> > http_access deny !My_InternetGroup_ACL
> > http_access allow My_Proxy_Auth_ACL
> >
> > This will cause a login prompt:
> > http_access deny !My_InternetGroup_ACL My_Proxy_Auth_ACL
> > http_access allow My_Proxy_Auth_ACL
> >
> > Jerry
> >
Received on Thu Oct 10 2002 - 06:28:12 MDT