[squid-users] NTLM Authentication

We're running Squid V2.5Stable10 on a Solaris 8 platform and are
attempting to get the NTLM authentication working along with basic
authentication for non-IE browsers.

So far, IE users that are logged into the domain authenticate without an
authentication prompt (good). Non IE users or users of other web clients
are prompted for authentication, which is expected, except now they must
type in the domain/username and password (i.e. ap1/myname) instead of just
their username. That's a bigger change in behaviour than we would like. Is
there a way to make this work or is this normal behaviour?

My authentication related configuration:

#Recommended minimum configuration:
auth_param ntlm program /usr/local/squid/libexec/ntlm_auth ap1/as7 ap1/as6
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param ntlm use_ntlm_negotiate off
auth_param basic program /usr/local/squid/sbin/mac_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
#auth_param basic casesensitive off

-Mike
Received on Wed Aug 03 2005 - 09:59:38 MDT