[squid-users] Re: Constant Login Prompt for NTLM Auth against Samba PDC

I figured it out to a point:

I had this config, which worked on another setup:

#Samba PDC Auth
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
#auth_param ntlm max_challenge_reuses 0
#auth_param ntlm max_challenge_lifetime 2 minutes
auth_param ntlm children 40
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 40
auth_param basic realm Cache NTLM Authentication
auth_param basic credentialsttl 2 hours

Though this setup now works:
auth_param ntlm program /usr/lib/squid/ntlm_auth 01Networks/Debian-PDC
auth_param ntlm children 5
#auth_param ntlm max_challenge_reuses 0
#auth_param ntlm max_challenge_lifetime 2 minutes

The reason I have two lines commented out on each is because even
though tons of sites claim to use max_challenge but they always error
out. Did something change?

On Wed, Nov 5, 2008 at 12:50 AM, Adam McCarthy
<zeroonetwothree_at_gmail.com> wrote:
> I currently have a Samba 3 PDC.
>
> Everything seems to work, except IE/Firefox both bring up a prompt for
> username and password.
>
> I'm using the exact same config files from another setup that worked fine.
>
> You for some reason can't type in just the username and password, like
> you would think.
>
> For example, my workgroup is 01Networks, and even though the XP Pro
> machine is logged in sucessfully with that same name, unless I type in
>
> 01Networks/adam and password, the prompts never go away.
>
> After I type those in they work.
>
> Why is this setup acting strange after a previous setup done exactly
> the same way works fine?
>
> Also, why would I be required to put in my Domain/User instead of just
> User when normally I only ever needed User?
>
> Also normally IE/Firefox just sent out my info.
>
Received on Wed Nov 05 2008 - 20:36:10 MST