Re: [squid-users] help for Helpers

On Fri, Dec 01, 2006, Alan Araujo wrote:
> Hi,
>
> I?ve getting trouble with Squid 2.6 in my company. The directors are
> cosidering to change it for a Blue Coat proxy. All the 60 NTLM Helpers
> are constantly in RESERVED or DEFERRED state.

Well, ntlm_auth is a part of Samba, not specifically Squid, right?
Have you checked to make sure the Samba side of AD authetnication is
configured and working right?

Things to check:

* Is the time on the squid server synced against the AD?
* Have you tried 'wbinfo -t' to see whether its authenticating ok?
  What about wbinfo -u (display user list)
* Hm, have you checked the samba and winbind log files for any
  hints?

Adrian

>
> We are using ADS with security option,
>
> auth_param ntlm max_challenge_reuses 100
> auth_param ntlm max_challenge_lifetime 20 minutes
> auth_param ntlm use_ntlm_negotiate on
> auth_param basic program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic
> #auth_param basic program /usr/bin/ntlm_auth --debug-level=10
> --helper-protocol=squid-2.5-basic --nt-response
>
> auth_param basic children 0
> auth_param basic realm Informe a senha de rede para acesso a Internet
> auth_param basic credentialsttl 2 hours
>
> I think that problem is related with Basic authentication becouse when
> I set it off the "hang on" stoped.
>
>
> I hoped that Squid open source could solve our problems but
> unfortunately I never got support on the lists and the community. So
> I?m afraid that Free Software are gone away in my company.

-- 
- Xenion - http://www.xenion.com.au/ - Hosting and Commercial Squid Support -