Re: [squid-users] Squid with webwasher using NTLM authentication

On fre, 2008-10-03 at 10:17 +0200, NGUYEN DANG LUAN, Eric wrote:

> I'm using squid as a cache server working with webwasher (proxy + authentication + webpage filter). Here's the context :
>
> User's computer<---->Squid <----> Webwasher<--->Internet
> |
> | Authentication
> |(Using NTLM)
> |
> NTLM
> Agent
>
> When a user is connect directly on webwasher it works. He is authenticated worretly (I can see that thanks to logs).
> But once I implement a Squid cache server, it doesn't work. My user can't be authenticated.

Have you told Squid to trust the webwasher proxy with proxy login
credentials? See cache_peer directive.

> Does anyone has an idea? I'm using squid 2.6 running on a RedHat linux server 5.

Maybe you need to upgrade to 2.7. But it depends on which exact 2.6
release you are using.. see below.

> Right now i'm trying squid 3 but it dosen't seem to work too.

squid-3.0 does not support forwarding of NTLM authentication as it does
not yet implement the required workarounds to Microsoft HTTP protocol
violations needed to support NTLM forwarding.

Regards
Henrik