[squid-users] NTLM/Winbind Auth with Acceleration Mode

From: Andrew McKinney <andrew@dont-contact.us>
Date: Mon, 1 Sep 2003 16:05:16 +0100

Hey All,

I've compiled squid/2.5.STABLE3, along with samba 2.2.7. I have compiled
both squid, and samba, as per the Reverse Proxy FAQ. Both these src's
have been compiled on RedHat 9.

Regarding auth, my squid.conf looks like this:

auth_param ntlm program /usr/local/squid/libexec/wb_ntlmauth
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/local/squid/libexec/wb_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
...
acl CONNECT method CONNECT
acl AuthorizedUsers proxy_auth REQUIRED
...
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access allow all AuthorizedUsers
http_access deny all

The acceleration options are fine, as its working with the default
'our_nets' acl. However, once this acl is removed, I get the following
error in cache.log:

aclAuthenticated: authentication not applicable on
accelerated requests.

wbinfo -t and -a both show winbindd to be working.

I've seen a couple of posts with this, from about 1999. I know Redhats
RPM's arent built with --enable-ntlm-auth-helpers="winbind" and
--enable-auth="ntlm,basic", I'm using src.

Any ideas, TIA.

Andrew

--
Andrew McKinney	//	e: 	andrew@evxnet.co.uk
EVX Networks	//	tel: 	07792003925
Received on Mon Sep 01 2003 - 09:05:30 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:28 MST