Re: [squid-users] MSN Messenger an wb_ntlmauth

Sorry, I forgot to say...
I'm using squid-2.5.STABLE1 on a Sun Solaris 8.
Thanks again,

--Claudio

>From: "Claudio Alonso" <cfa71@hotmail.com>
>To: squid-users@squid-cache.org
>Subject: [squid-users] MSN Messenger an wb_ntlmauth
>Date: Wed, 19 Mar 2003 09:55:48 -0300
>
>Hello everybody!
>I finally got squid with wb_ntlmauth working perfectly. Only the users that
>belong to the group InternetSquid (in the Win NT domain) can access the
>web.
>But now I need to give some users access to MSN Messenger.
>If I disable wb_ntlmauth, all the users can use Messenger.
>If I give some users direct access (I mean IP validation previous to
>wb_ntlmauth), they can use Messenger.
>But I need to do it based on the user's group.
>Besides, if I look at the log file, I see that squid usually gets domain
>and username from the computers that are accessing with Internet Explorer
>(and also with Netscape and Mozilla via basic authentication). But when
>they try to access MSN via MSN Messenger, they don't inform the user data
>(at least, it doesn't show in the log file). I think Messenger is properly
>configured (it's configured with proxy address, username and password), so
>the problem may be in my configuration file.
>Can anybody give me a clue?
>I'm copying the entries from my squid.conf file.
>Thanks in advance,
>
>--Claudio
>
>
>#squid.conf begins
>
>http_port 8080
>hierarchy_stoplist cgi-bin ?
>acl QUERY urlpath_regex cgi-bin \?
>no_cache deny QUERY
>cache_dir ufs /usr/local/squid/var/cache 100 16 256
>auth_param ntlm program /usr/local/squid/libexec/wb_ntlmauth
>auth_param ntlm children 15
>auth_param ntlm max_challenge_reuses 0
>auth_param ntlm max_challenge_lifetime 2 minutes
>auth_param basic program /usr/local/squid/libexec/wb_auth
>auth_param basic children 15
>auth_param basic realm Squid proxy-caching web server
>auth_param basic credentialsttl 2 hours
>external_acl_type wbinfo_group %LOGIN
>/usr/local/squid/libexec/wbinfo_group.pl
>refresh_pattern ^ftp: 1440 20% 10080
>refresh_pattern ^gopher: 1440 0% 1440
>refresh_pattern . 0 20% 4320
>acl all src 0.0.0.0/0.0.0.0
>acl manager proto cache_object
>acl localhost src 127.0.0.1/255.255.255.255
>acl to_localhost dst 127.0.0.0/8
>acl SSL_ports port 443 563
>acl Safe_ports port 80 # http
>acl Safe_ports port 21 # ftp
>acl Safe_ports port 443 563 # https, snews
>acl Safe_ports port 70 # gopher
>acl Safe_ports port 210 # wais
>acl Safe_ports port 1025-65535 # unregistered ports
>acl Safe_ports port 280 # http-mgmt
>acl Safe_ports port 488 # gss-http
>acl Safe_ports port 591 # filemaker
>acl Safe_ports port 777 # multiling http
>acl CONNECT method CONNECT
>acl internet-group external wbinfo_group InternetSquid
>http_access allow manager localhost
>http_access deny manager
>http_access deny !Safe_ports
>http_access deny CONNECT !SSL_ports
>http_access allow internet-group
>http_access deny all
>http_reply_access allow all
>icp_access allow all
>visible_hostname SquidProxy
>coredump_dir /usr/local/squid/var/cache
>
>#squid.conf finishes
>
>
>_________________________________________________________________
>Charla con tus amigos en línea mediante MSN Messenger:
>http://messenger.yupimsn.com/
>

_________________________________________________________________
Charla con tus amigos en línea mediante MSN Messenger:
http://messenger.yupimsn.com/
Received on Wed Mar 19 2003 - 07:50:25 MST