Pessoal, bom dia.
Tenho o Squid autenticado no AD, tudo funciona normalmente, mas alguns
sites simplemente ficam pedindo senha toda hora e não funcionam, para
máquinas fora do domínio, não adianta entrar com credenciais, fica
pedindo senha toda hora, alguém tem uma luz?
Obrigado.
squid.conf:
auth_param ntlm program /usr/local/bin/ntlm_auth RUMOTECNOLOGIA/RS01
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 100
auth_param ntlm keep_alive on
client_persistent_connections on
server_persistent_connections on
auth_param basic program /usr/local/bin/ntlm_auth RUMOTECNOLOGIA/RS01
--helper-protocol=squid-2.5-basic
auth_param basic children 100
auth_param basic casesensitive off
auth_param basic realm Usuario e senha
auth_param basic credentialsttl 4 hours
acl users proxy_auth REQUIRED
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 443
acl Safe_ports port 8084
acl Safe_ports port 8085
acl Safe_ports port 8080
acl Safe_ports port 5222
acl Safe_ports port 2510
acl CONNECT method CONNECT
acl naoautenticados dstdom_regex -i /usr/local/squid/naoautenticados
http_access allow localhost manager
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
http_access allow naoautenticados
http_access deny !users
http_access allow users
http_access deny all
http_port 192.168.254.121:3128
cache_mem 512 MB
cache_dir aufs /var/squid/cache/squid 512 10 20
maximum_object_size 4 MB
maximum_object_size_in_memory 2 MB
coredump_dir /var/squid/cache/squid
visible_hostname Microsoft-Windows-NT-Server-4.0
cache_mgr adiel.ribe...@rumosolucoes.com
httpd_suppress_version_string on
refresh_pattern -i \.(gif|png|jpg|jpeg|ico|tiff|bmp)$ 10080 50% 43200
override-expire ignore-no-store ignore-private
refresh_pattern -i \.(doc|pdf|docx|xls|xlsx|txt|ppt|pptx)$ 10080 90%
43200 override-expire ignore-no-store ignore-private
refresh_pattern -i \.index.(html|htm)$ 1440 50% 10080
refresh_pattern -i \.(html|htm|css|js)$ 1440 50% 10080
refresh_pattern (/cgi-bin/|\?) 1440 50% 4320
--
att,
Adiel de Lima Ribeiro
facebook.com/sembr.dyndns.info
-
Histórico: http://www.fug.com.br/historico/html/freebsd/
Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
