On 18/03/2016 7:29 a.m., James Zuelow wrote:
> Hello -
>
> I have Squid 3.4.8 installed on Debian Jessie.
>
> I'm using the negotiate wrapper configured like this:
>
> auth_param negotiate program /usr/lib/squid3/negotiate_wrapper_auth -d \
> --kerberos /usr/lib/squid3/negotiate_kerberos_auth -s
> HTTP/proxy.domain.local@DOMAIN.LOCAL \
> --ntlm /usr/bin/ntlm_auth --helper-protocol=gss-spnego
> --domain=DOMAIN.LOCAL
>
"--helper-protocol=gss-spnego" configures Negotiate/Kerberos, not
Negotiate/NTLM.
For Negotiate/NTLM what you need is "--helper=squid-2.5-ntlmssp"
Or, drop the wrapper helper entirely and just use:
auth_param negotiate program /usr/bin/ntlm_auth \
--helper-protocol=gss-spnego --domain=DOMAIN.LOCAL
Amos
