Re: [squid-users] Help on Squid with ntlm auth ..

On 6/1/05, Phibee Network operation Center <noc@phibee.net> wrote:
> Hi
>
> i request your help for resolve four problems that i have with Squid/Samba.
> I use squid-2.5.STABLE9 and samba 3.0.14a with a authentification ntlm
> winbindd
>
> my fours problems :
>
> 1- I don't know why, but all web site with a refresh have a access denied ..
> my user going on the web site no problems, wait 5mn the web site refresh
> and
> when he refresh i have a access denied
>
> 2- I don't know why with IE i can't going on www.ratp.fr when i use the
> proxy squid.
> i have a box for download and not the web site .. i don't know what is
> the process
> for debug this ... without squid the web site work's !!!!!
>
> 3- What is the access right for accept this:
> 1117612694.193 0 10.206.1.251 TCP_DENIED/407 1790 GET
> cache_object://10.206.1.251/counters - NONE/- text/html
> 1117612694.197 0 10.206.1.251 TCP_DENIED/407 1778 GET
> cache_object://10.206.1.251/5min - NONE/- text/html
> 1117612694.201 0 10.206.1.251 TCP_DENIED/407 1781 GET
> cache_object://10.206.1.251/60min - NONE/- text/html
>
> 4- i have a lot of problems of authentification, when i change the
> password on my Active Directory, 3/4 hours after squid don't have
> the new password ... can i said a small cache live ?
>
>
> Thanks for your help
>

I do have a Squid with ntlm auth but I do not use any
external_acl_type directive. I've joined my proxy to the Win2K domain
and simply running the nmbd&winbindd my authentication works
perfectly, even when users change passwords.
Do you see anything in the samba logs?

HTH

Regards

-- 
Leonardo Arena