[squid-users] squid authentication details when using NTLM integrated authentication

From: Brett Lymn <blymn@dont-contact.us>
Date: Tue, 22 Mar 2005 12:09:32 +1030

Folks,
        I am having interesting times. I have squid 2.5 stable7 (a bit
old I know but it is working), I am running samba3 and using the integrated
NTLM authentication so our users get authenticated to the AD domain when
they use their IE. All this works fine and is good.

We have added websense to the mixture, this also works fine and good mostly
except for one small thing - when squid passes the authentication details
to the Websense redirector the '\' character has been encoded as a %5c
which I can understand but the Websense people see this as an issue and
their AD lookups fail because they don't parse on the %5c. Websense support
are claiming that I must have configured something incorrectly but, for
the life of me, I cannot see anything to configure for this. Am I missing
something here?

For the moment I have chained a redirector in front of theirs that rewrites
the %5c sequence back into a \ character - all works and is happy but it
annoys me that I need to blow another n processes simply to work around
what I think is a bug in Websense.

-- 
Brett Lymn
Received on Mon Mar 21 2005 - 18:39:36 MST

This archive was generated by hypermail pre-2.1.9 : Fri Apr 01 2005 - 12:00:02 MST