Andrew, After some more tests, I am having the sense that using 'use_ntlm_negotiate on' is slowing down Squid. I don´t have any data to support this, though. Are there any reports about it?
Thanks in advance, Carlos. 2006/5/4, Carlos Zottmann <[EMAIL PROTECTED]>:
Hi !! I have set 'use_ntlm_negotiate on' in squid.conf and it seems to have solved the problem. I am not using this proxy server in the production environment yet, but in the tests we conducted the problem didn´t show up anymore ... Thanks!! Carlos. 2006/5/3, Carlos Zottmann <[EMAIL PROTECTED]>: > Hi !! > > Thanks for the answer, Andrew ... > > I have used both IE 6.0 and Firefox 1.5.0.2, and got the same problem > with both. > I will set 'use_ntlm_negotiate' in squid.conf and will let you know the > results .. > > Thanks again !! > Carlos. > > 2006/5/3, Andrew Bartlett <[EMAIL PROTECTED]>: > > > > On Tue, 2006-05-02 at 17:46 -0300, Carlos Zottmann wrote: > > Hi !! > > > > I am installing Squid-2.5 Stable 13, on a FedoraCore 5 x86_64 machine, > doing > > ntlm authentication through Samba 3.0.22, wich was installed via rpm. > > > > Everything is working fine except that the browser every now and then > asks > > for the username and password. > > Which browser? > > > I have done some basic samba tests, like wbinfo -t, wbinfo -u and > wbinfo -g, > > and everthing worked ok. > > > > Looking at squid´s cache.log , I found the following error: > > > > [2006/05/02 11:33:00, 1] libsmb/ntlmssp.c:ntlmssp _update(231) > > Called NTLMSSP after state machine was 'done' > > > > Have anyone run into this yet? > > I wonder if the issue is due to some change at our end. We may have > broken support where 'use_ntlm_negotiate' isn't set (in the squid > configuration). This option permits better security in any case, so > give it a try. > > Andrew Bartlett > -- > Andrew Bartlett > http://samba.org/~abartlet/ <http://samba.org/%7Eabartlet/> > Authentication Developer, Samba Team http://samba.org > Student Network Administrator, Hawker College http://hawkerc.net > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2.2 (GNU/Linux) > > iD8DBQBEWHQHz4A8Wyi0NrsRAsg4AKCUlXThk6RMQYgEEBZ2SSIFvKsuJgCfdJSZ > AG5sUyIVIOobjSnMytQ2xN8= > =/4LS > -----END PGP SIGNATURE----- > > > >
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
