[squid-users] Authentication Issue with Squid and mixed BASIC/NTLM auth

Hey all,

I've got a tough situation I'm hoping someone can help me with.

We 'downgraded' from an old 3.0PRE build that a predecessor had setup on a reverse proxy, to squid 2.6.STABLE20. The proxy runs your standard OWA over Reverse Proxy setup, with login=PASS to an OWA backend running with BASIC/NTLM auth. We have to have the NTLM for phones that sync with ActiveSync.

It seems like something fundamental has changed in the way squid handles auth from 3.0 to squid 2.6. Using firefox on 2.6, I can auth with just 'USERNAME', with IE on 2.6 we have to type "DOMAINUSERNAME" or "USER_at_DOMAIN" now. Previously, with squid 3.0, just 'USERNAME' would work for auth.

While this seems trivial, anything harder than just 'USERNAME' boggles a lot of users. I'm assuming this has something to do with 'attempting NTLM' negotiation? Is there a way around it in squid 2.6?

Thanks in advance.
-Chris
Received on Wed Oct 15 2008 - 21:50:39 MDT