[squid-users] R: [squid-users] I: Problem with some website and application

From: Job <Job_at_colliniconsulting.it>
Date: Fri, 7 Sep 2012 14:56:10 +0200

Hello Amos!

Excuse me but i loose your reply! :)

i work with explicited proxy WITH authentication, maybe i was wrong when writing my post.

Can i operate, with Windows 7 and Vista, this workaround in the registry?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
LmCompatibilityLevel at value 1.

Do you think it solves the problem?
Any other ideas?

Thank you!
Francesco

________________________________________
Da: Amos Jeffries [squid3_at_treenet.co.nz]
Inviato: domenica 5 agosto 2012 12.39
A: squid-users_at_squid-cache.org
Oggetto: Re: [squid-users] I: Problem with some website and application

On 4/08/2012 3:50 a.m., Job wrote:
> Hello,
>
> i use squid since about ten years, i grew up with squid!
>
> Actually i have got a big problem, expecially in public administration in Italy, when using NTLM authentication and explicited proxy.
>
> Some website and client server application does not work behind explicited authenticated proxy; those are bad written, not w3c, and not well working.
> I have to create some iptables bypass and working with wpad.
>
> Furthermore, some website call other website, so debugging the failed access become very very hard and spend lots of time, and customers says "but at home with home-dsl everything is fine! Why not at office?"
>
> It is very frustrating, i think to use only transparent proxy with no authentication scheme.
>
> What do you think about?

If it were possible for you to operate "transparent proxy" without
authentication, why are you not operating an "explicit proxy" without
authentication?

Or perhapse you could tell us what the problems you are facing are, what
systems are involved and what versions of the relative software. Noting
that Windows Vista and later are designed to work with Kerberos instead
of NTLM - which is likely the real cause of your problem.

Amos
Received on Fri Sep 07 2012 - 12:59:07 MDT

This archive was generated by hypermail 2.2.0 : Sat Sep 08 2012 - 12:00:04 MDT