RE: [squid-users] pam_auth and IE

Jerry,

Do you ever sleep? Seems like you have been responding to our questions
for quite a while over the last 24 hours.

Do you know if we do decide to do NTLM authentication and NOT use the
no_check helper if Squid actually has to be joined into the AD domain?

Thanks,

Eric Ferguson

-----Original Message-----
From: Jerry Murdock [mailto:jmurdock@itraktech.com]
Sent: Tuesday, June 03, 2003 8:24 AM
To: McWhirter,Julia; Eric Ferguson; squid-users@squid-cache.org
Subject: Re: [squid-users] pam_auth and IE

Think that's it. not sure if they will NEVER get a prompt, I haven't
played with it.

Jerry

----- Original Message -----
From: "McWhirter,Julia" <julia.mcwhirter@superh.com>
To: "Jerry Murdock" <jmurdock@itraktech.com>; "Eric Ferguson"
<eric.ferguson@jaguartech.com>; <squid-users@squid-cache.org>
Sent: Tuesday, June 03, 2003 5:04 AM
Subject: RE: [squid-users] pam_auth and IE

Jerry,

Sorry to but in on this but I am also very interested in the logging of
user information without the hassle of authentication. Did you mean the
no_check helper? And with this module is the user prompted for the
username/password?

Regards
Julia McWhirter
IT Manager

SuperH (UK) Ltd
Network House
2410 Aztec West
Almondsbury
Bristol
BS32 4QX.

Web : www.superh.com
E-mail : julia.mcwhirter@superh.com
Direct : +44 1454 465661
Switch : +44 1454 465600
Mobile : +44 7979 913494

> -----Original Message-----
> From: Jerry Murdock [mailto:jmurdock@itraktech.com]
> Sent: 03 June 2003 05:22
> To: Eric Ferguson; squid-users@squid-cache.org
> Subject: Re: [squid-users] pam_auth and IE
>
> If you really don't care about authentication, one of the NTLM helpers
> doesn't check passwords - just accepts whatever the browser feeds it.
>
> Jerry
> ----- Original Message -----
> From: "Eric Ferguson" <eric.ferguson@jaguartech.com>
> To: "'Jerry Murdock'" <jmurdock@itraktech.com>;
> <squid-users@squid-cache.org>
> Cc: <doobie.sellers@jaguartech.com>
> Sent: Monday, June 02, 2003 8:20 PM
> Subject: RE: [squid-users] pam_auth and IE
>
>
> > Hi Jerry,
> >
> > Just to make sure I am thinking right then, I need to get NTLM
> > authentication running in order to avoid the popups?
> >
> > The squid box needs to authenticate to a Windows 2000 native AD.
All I
> > really want to do is get logging of the Windows user ID in the squid
> > logs. If I can do this without proxy authentication, I would be
fine
> > with that too. If you could bear with me, I just have a few
questions.
> >
> > 1. Will NTLM authentication work in a native Windows 2000 AD.
> >
> > 2. What is the simplest way to get the authentication or logging
working
> > in a native Windows 2000 AD? (I'm hoping not to have to set up
Samba,
> > join the domain, etc.)
> >
> > 3. Do I really need proxy authentication to get basic logging of the
> > user ID in the log?
> >
> > Thanks for all your help!!!
> >
> > Eric Ferguson
> >
> >
> > -----Original Message-----
> > From: Jerry Murdock [mailto:jmurdock@itraktech.com]
> > Sent: Monday, June 02, 2003 6:05 PM
> > To: Eric Ferguson
> > Subject: Re: [squid-users] pam_auth and IE
> >
> > The behavior your describing is characteristic of NTLM
authentication.
> >
> > With any basic authenticator, you will still get the initial user/pw
> > prompt.
> >
> > Jerry
> >
> > ----- Original Message -----
> > From: "Eric Ferguson" <eric.ferguson@jaguartech.com>
> > To: <squid-users@squid-cache.org>
> > Sent: Monday, June 02, 2003 5:41 PM
> > Subject: [squid-users] pam_auth and IE
> >
> >
> > > Hi All,
> > >
> > > I am using proxy authentication for squid. My clients are being
> > > prompted for user name and password and being authenticated
correctly-
> > > so far so good. However, I thought IE would send an initial ID
and
> > > password for the currently authenticated user on its first attempt
to
> > > authenticate and not require the user to do a manual login.
> > >
> > > I am currently using the built-in radius helper for squid because
the
> > > PAM radius authenticator is having problems with Redhat 9.0.
> > >
> > > Any suggestions would be appreciated.
> > >
> > > Thanks,
> > >
> > > Eric
> > >
> > > Eric.ferguson@jaguartech.com
> > >
> > >
> > >
> > >
> >