Re: [squid-users] AW: NTLM problem with Internet explorer/windows

The fact that other browsers are perfectly fine logging in through the
proxy should tell you it is a problem with IE.

Also for the record please reconsider the use of NTLM on a website.

The amount of trouble you are having to go to to get it to operate
should be an indication of its (lack of) usefulness. WindowsXP is being
end-of-life'd this month and was the last system to support NTLM by default.

Amos

On 8/04/2014 11:37 p.m., Rietzler, Markus wrote:
> What are the problems?
>
> There are two issues:
>
> 1) squid doing user auth via ACL 2) squid forwards / passthrough auth
> to IIS
>
> Are there any squid-parent proxies involved?
>
>
> Normally
>
> http_port 8080 connection-auth=on
>
> where connection-auth is on per default? That means, that ntlm-auth
> is passed through squid. Which samba/winbind version are you using.
> For IE10 and up you have to use "newer" versions (i think > 3.6.x)
>
>
> markus
>
>
> -----Ursprüngliche Nachricht-----
> Von: Antero Prazeres
>
> Hello, I need some help with this issue as I am out of ideas and I
> don¹t find any similar issues on your lists/emails/faqs. I am using a
> server with CentOS6 and Squid 3.1.10 as a proxy. One of my teams
> needs to access to ISS 7 trough Squid for test and development
> purposes using only NTLM. Squid server is accessing the AD and
> credentials are working. All tests performed with Wbinfo are
> successful. The access to the IIS ntlm site is successful from
> Firefox and Safari, all returning the message ³you are authenticated
> using NTLM². I try to perform the same test on several machines with
> Windows 7 and Internet Explorer, most of them 11, and don¹t work. GPO
> was altered on the windows for NTLM, ISS site is requesting NTLM with
> extended protection and kernel=mode authentication off.
>
> Somebody as any ideas please??
>
> Thank you
>
> Best regards
>
> Antero Prazeres
>
Received on Tue Apr 08 2014 - 12:33:56 MDT