[squid-users] NTLM + Squid - No NTLM Header being sent

I am trying to get Squid and NTLM working together. I've looked at
several guides, and the same thing happens with all of them. Whenever I
try to access a page (using IE6 - should support NTLM), I get a dialog
box asking for my username and password - which if provided
authenticates me and I can browse the site. I've used ethereal to
capture the conversation and noticed that there isn't an NTLM
authenticate header as seen below:

HTTP/1.0 407 Proxy Authentication Required
Server: squid/2.5.STABLE12
Mime-Version: 1.0
Date: Tue, 01 May 2007 01:10:37 GMT
Content-Type: text/html
Content-Length: 1322
Expires: Tue, 01 May 2007 01:10:37 GMT
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Proxy-Authenticate: Basic realm="Squid proxy-caching web server"
X-Cache: MISS from proxy.domain.local
X-Cache-Lookup: NONE from proxy.domain.local:3128
Proxy-Connection: close

Here are the contents of my squid.conf file (minus all the comments and
blank space) - which according to the guides I've seen should be enough
to do NTLM.

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
hosts_file /etc/hosts
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 10
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param basic program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl lcl src 192.168.0.0/16
acl SSL_ports port 443 # 563 # https, snews
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # 563 # https, snews
acl NTAuth proxy_auth REQUIRED
http_access allow lcl NTAuth
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow all
http_port 127.0.0.1:3128
http_port 192.168.1.241:3128
cache_mgr mjvipond@yahoo.com
httpd_accel_port 80
httpd_accel_single_host off
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
coredump_dir /var/spool/squid
visible_hostname proxy.domain.local
httpd_accel_host virtual

Thanks
-Mike
Received on Thu May 03 2007 - 10:09:35 MDT