Re: [squid-users] RE: libsmb/ntlmssp.c:ntlmssp_update(334)

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 11 Feb 2010 00:50:10 +1300

Dawie Pretorius wrote:
> Is it possible that someone can get back to me on this issue, thanks
>
> Dawie Pretorius
>
> Hello
>
> Getting this error sometimes in my cache.log:
>
> [2010/01/28 14:23:58, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
> got NTLMSSP command 3, expected 1
> 2010/01/28 14:25:51| AuthConfig::CreateAuthUser: Unsupported or unconfigured/inactive proxy-auth scheme, ''
>
> Gentoo squid-3.0.STABLE19

Hi Dawie,

The "3" and "1" have been explained as the difference between NTLM vs
Kerberos.

As far as I can tell "3" means Kerberos is being used. "1" is NTLM.
The ntlm_auth helper only checks NTLM and the squid_kerb_auth helper is
needed instead for Kerberos.

Looks to me like the client is broken and using Kerberos when offered
NTLM as the only available auth option.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE23
   Current Beta Squid 3.1.0.16
Received on Wed Feb 10 2010 - 11:50:50 MST

This archive was generated by hypermail 2.2.0 : Thu Feb 11 2010 - 12:00:04 MST