Re: [squid-users] Samba domain and ntlm_auth, seamless auth NOT wanted

On Fri, 2005-07-15 at 13:46 +0200, Marco De Vitis wrote:

> I'd prefer this to make users more aware of the fact that their Internet
> access is being logged (they will be warned anyway before starting all
> this, but you know how easily users forget...), and to protect them from
> other users who might use Explorer while they leave their PC alone with
> their user logged in.
>
> Is this currently possible, somehow?
> Thanks.

I think you can just change to using basic authentication.

Instead of:

auth_param ntlm program /usr/local/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param ntlm use_ntlm_negotiate off

you can use:

auth_param basic program /usr/local/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 10
auth_param basic realm proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

Other more knowledgeable people can confirm this.

David.

This email is confidential and is intended solely for the use of the
parties to whom it is addressed. If you are not the intended
recipient, be advised that you have received this email in error and
that any use, dissemination, forwarding, printing, or copying of this
email is strictly forbidden. If you have received this email in error
please contact the sender. Any views or opinions presented are solely
those of the author and do not necessarily represent the views of
Newcastle College. Although this email and it's attachments are
believed to be free of any virus or other defects which might affect
any computer or IT system into which they are received, no
responsibility is accepted by Newcastle College or any of it's
associated companies for any loss or damage arising in any way from
the receipt or use thereof.
Received on Fri Jul 15 2005 - 06:20:23 MDT