Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request

Hi,

At 12.53 19/04/2006, Henrik Nordstrom wrote:

>tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer:
>
> > That's NTLM handshaking, it's normal behaviour. Blame MS for creating a
> > crappy implementation of the authentication mechanism.
>
>Will get better the day we can switch to use Kerberos/SPNEGO
>authentication.. but unfortunately not yet sufficiently supported in
>any of the involved components (browers, Squid, Samba) to be deployed
>seriously..
>
>The Squid side of things is available in Squid-3, or as a patch to 2.5
>at devel.squid-cache.org. The Samba side is available in Samba-4, and
>the MSIE browser side of things is available in the next Windows
>version..

Just some updates about:

It seems that in the latest Samba 4 sources something is again broken .... :-(

But now there is a binary build of a patched Squid 2.5 STABLE 13 for
Windows with full negotiate/Kerberos support.

You can find it here (in the download page):

http://www.acmeconsulting.it/SquidNT.html

Negotiate works fine with Firefox 1.5, SeaMonkey 1.0 and IE 7 BETA 2.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Wed Apr 19 2006 - 11:18:21 MDT