[squid-users] ntlmssp_server_auth: failed to parse NTLMSSP from Roland Penner on 2004-12-09 (squid-users)

From: Roland Penner <RPenner@dont-contact.us>
Date: Thu, 9 Dec 2004 15:42:51 -0600

Hi I have recently installed a squid cache server for our network.

The system is running RedHat Linux 7.3

I installed:

Samba-3.0.8 from source
   configure options:
    --with-winbind
    --with-acl-support
    --with-ads
    --with-ldap

Squid-2.5.STABLE7 from source
   configure options:
    --enable-auth=ntlm,basic
    --enable-basic-auth-helpers=winbind
    --enable-ntlm-auth-helpers=winbind

I am getting numerous errors in my cache.log file (see bottom of message for more detail)

[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
ntlmssp_server_auth: failed to parse NTLMSSP:

I have read previous posts that report the same problem however it seems that the problem was fixed with a patch
http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlmtruncated

However, I am running STABLE7 which includes the patch and I'm still seeing my cache.log file fill up with these errors. The users are still able to access web sites, however I am receiving tons of these errors in my cache.log file and I'm a bit concerned. These errors seem to be coming from many different PCs. They're all running either WinXP SP2 or Win98SE with Internet Explorer 6.

Any idea why this is still happening to me?

Thanks,

Roland

Squid.conf
=======================
http_port 8080

cache_effective_user squid

auth_param ntlm program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --debuglevel=2 auth_param ntlm children 15 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes

auth_param basic program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
acl AuthorizedUsers proxy_auth REQUIRED

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow AuthorizedUsers

http_access deny all
http_reply_access allow all
icp_access allow all

Cache.log ======================================================

[2004/12/09 14:46:25, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:25, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 23 55 E3 66 C3 62 8C 9F AB C0 BHS218#U ãfÃb..«À
  [050] D5 00 E5 A6 D9 33 08 8E 86 66 68 3A 0D A3 Õ.å¦Ù3.. .fh:.£
[2004/12/09 14:46:25, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:25, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 C0 19 50 25 56 55 6A 0B 2E 92 BHS218À. P%VUj...
  [050] A3 F3 0D B8 5B EF 9F 5D FB A1 A2 A7 E9 CD £ó.¸[ï.] û¡¢§éÍ
[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:26, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 AC 53 B5 0C 7D 72 E3 51 51 77 BHS218¬S µ.}rãQQw
  [050] F4 EE D6 A9 F7 43 1E 71 14 57 05 FD 7C 46 ôîÖ©÷C.q .W.ý|F
[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:26, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 00 F3 24 00 02 47 FA 8A BD 27 BHS218.ó $..Gú.½'
  [050] 39 74 74 FC 0C 49 57 59 10 5F 87 EB 1F BC 9ttü.IWY ._.ë.¼
[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:26, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 B9 19 59 CB AD 63 3A FB AA 9F BHS218¹. YËc:ûª.
  [050] 15 6B 5B 1A C5 00 0F 1F 27 4A 97 69 69 89 .k[.Å... 'J.ii.
[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:26, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 B5 12 7B 55 4B AA 70 DB CE BF BHS218µ. {UKªpÛÎ¿
  [050] FA B3 A6 BF 11 97 7A 19 6F 88 A1 08 3D FD ú³¦¿..z. o.¡.=ý
[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:26, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 37 48 FB 7D EB 34 60 AC 4D B3 BHS2187H û}ë4`¬M³
  [050] D2 AA 03 95 B7 36 67 D3 13 91 3E 44 88 31 Òª..·6gÓ ..>D.1
[2004/12/09 14:46:26, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 14:46:26, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 46 00 00 00 00 00 00 00 5E 00 00 00 04 00 04 00 F....... ^.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 43 41 52 49 4D 45 4C 41 >...SCHS CARIMELA
  [040] 42 48 53 32 31 38 04 34 7D B5 78 5F 23 CA CC D3 BHS218.4 }µx_#ÊÌÓ
  [050] 55 42 DC 44 CF 98 D5 75 35 32 B4 DC 47 50 UBÜDÏ.Õu 52´ÜGP

...

[2004/12/09 15:34:58, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 CA 16 37 70 BA F7 4F 99 C0 ISONR98Ê .7pº÷O.À
  [050] FC 97 A8 7D 98 11 AB B0 07 A7 EA 81 E3 15 F7 ü.¨}..«° .§ê.ã.÷
[2004/12/09 15:35:11, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:11, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 45 00 00 00 00 00 00 00 5D 00 00 00 04 00 04 00 E....... ].......
  [020] 34 00 00 00 05 00 05 00 38 00 00 00 08 00 08 00 4....... 8.......
  [030] 3D 00 00 00 53 43 48 53 48 45 4E 52 59 4C 41 42 =...SCHS HENRYLAB
  [040] 43 4F 31 32 32 C2 CB AA AE C2 00 67 C9 D9 8E B6 CO122ÂËª ®Â.gÉÙ.¶
  [050] 7B 83 1D FE CB 91 E5 03 F9 63 62 73 13 {..þË.å. ùcbs.
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 E7 3C 90 F0 67 A7 16 B1 14 ISONR98ç <.ðg§.±.
  [050] BD A3 2D 78 D3 AC 51 91 28 2E FB 55 60 F5 04 ½£-xÓ¬Q. (.ûU`õ.
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 CD E0 0A E2 DD 50 48 71 EA ISONR98Í à.âÝPHqê
  [050] B9 FF 89 81 0D AA 19 4C 29 F0 46 A6 6F 21 36 ¹ÿ...ª.L )ðF¦o!6
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 0B 05 06 27 BA 32 12 33 E3 ISONR98. ..'º2.3ã
  [050] C8 A9 EF F9 69 EA D0 44 9E 9A 67 9E A5 32 9E È©ïùiêÐD ..g.¥2.
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 75 F6 BC 18 25 1C 5C B3 7F ISONR98u ö¼.%.\³.
  [050] 57 EC F9 7B 28 B7 51 3D B6 73 12 2D D2 C8 B2 Wìù{(·Q= ¶s.-ÒÈ²
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 6E 15 FD 67 8B 2E 00 1A F3 ISONR98n .ýg....ó
  [050] 9C F3 88 59 81 93 7C 84 22 4E D5 D8 3C B9 16 .ó.Y..|. "NÕØ<¹.
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 CD BB 72 AA E1 76 C8 89 CF ISONR98Í »rªávÈ.Ï
  [050] 03 E4 23 CC CC 0D B7 D7 A3 D3 91 00 9C 43 88 .ä#ÌÌ.·× £Ó...C.
[2004/12/09 15:35:19, 1] libsmb/ntlmssp.c:ntlmssp_server_auth(549)
  ntlmssp_server_auth: failed to parse NTLMSSP:
[2004/12/09 15:35:19, 2] lib/util.c:dump_data(1894)
  [000] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........
  [010] 47 00 00 00 00 00 00 00 5F 00 00 00 04 00 04 00 G....... _.......
  [020] 34 00 00 00 06 00 06 00 38 00 00 00 09 00 09 00 4....... 8.......
  [030] 3E 00 00 00 53 43 48 53 41 4C 49 53 4F 4E 41 4C >...SCHS ALISONAL
  [040] 49 53 4F 4E 52 39 38 D8 08 13 C8 06 2F E1 65 5D ISONR98Ø ..È./áe]
  [050] 65 0E D5 DE 4C 5A 09 E4 EB 61 7A D3 90 82 3B e.ÕÞLZ.ä ëazÓ..;
Received on Thu Dec 09 2004 - 14:42:53 MST

This archive was generated by hypermail pre-2.1.9 : Sat Jan 01 2005 - 12:00:02 MST