Re: [squid-users] Squid authentication stopped working
Looks like I got it working. Not sure exactly why all of a sudden it stopped but with Kinkie's help we cleaned up my squid.conf file and (I'm not sure if this helped) reconnected to the domain. I think I was already connected but redid to be on the safe side. Eric On Wed, Sep 25, 2013 at 1:59 PM, Kinkie gkin...@gmail.com wrote: That's the way NTLM is supposed to work. It requires 2x 407 DENIED for each new tcp connection. On Wed, Sep 25, 2013 at 7:36 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I see The reply for POST http://somedomain.com is DENIED because it matched 'ntlm_auth' but then right after I see the same thing but it says is ALLOWED. On Wed, Sep 25, 2013 at 1:30 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Still at a loss on this. If anyone has an idea let me know. On Wed, Sep 25, 2013 at 12:57 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie -- /kinkie -- /kinkie
[squid-users] Squid authentication stopped working
Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer
Re: [squid-users] Squid authentication stopped working
What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie
Re: [squid-users] Squid authentication stopped working
I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie
Re: [squid-users] Squid authentication stopped working
so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie
Re: [squid-users] Squid authentication stopped working
I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie
Re: [squid-users] Squid authentication stopped working
can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie -- /kinkie
Re: [squid-users] Squid authentication stopped working
I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie -- /kinkie
Re: [squid-users] Squid authentication stopped working
Still at a loss on this. If anyone has an idea let me know. On Wed, Sep 25, 2013 at 12:57 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie -- /kinkie
Re: [squid-users] Squid authentication stopped working
I see The reply for POST http://somedomain.com is DENIED because it matched 'ntlm_auth' but then right after I see the same thing but it says is ALLOWED. On Wed, Sep 25, 2013 at 1:30 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Still at a loss on this. If anyone has an idea let me know. On Wed, Sep 25, 2013 at 12:57 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie -- /kinkie
Re: [squid-users] Squid authentication stopped working
That's the way NTLM is supposed to work. It requires 2x 407 DENIED for each new tcp connection. On Wed, Sep 25, 2013 at 7:36 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I see The reply for POST http://somedomain.com is DENIED because it matched 'ntlm_auth' but then right after I see the same thing but it says is ALLOWED. On Wed, Sep 25, 2013 at 1:30 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Still at a loss on this. If anyone has an idea let me know. On Wed, Sep 25, 2013 at 12:57 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am assuming you mean -V and its Version 3.6.3 On Wed, Sep 25, 2013 at 12:56 PM, Kinkie gkin...@gmail.com wrote: can you do a ntlm_auth -v? On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I am using /usr/bin/ntlm_auth with squid. On Wed, Sep 25, 2013 at 12:53 PM, Kinkie gkin...@gmail.com wrote: so it's kerberos, not ntlm, is it? On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer e...@ericvanderveer.com wrote: I already rejoined to the domain. I checked to make sure and I can see the certificate when i do a klist. On Wed, Sep 25, 2013 at 12:45 PM, Kinkie gkin...@gmail.com wrote: What kind of ntlm auth helper are you using? Samba's? If so, othe simplest reason I can think of without additional info is that your machine account in AD went stale for some reason.. can you try rejoining the domain? On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer e...@ericvanderveer.com wrote: Hi, I have been running squid, dansguardian and ntlm_authentication for about 2 months now with no problem. This morning it stopped working. I can no longer surf and I get login pop ups on my window clients. On the squid server I can see the domain and its users so I am connected. My cache.log is showing a lot of stuff but most of it is greek to me. Here is a snippet http://pastebin.com/YryKkC0J Any ideas? Thanks Eric Vanderveer -- /kinkie -- /kinkie -- /kinkie -- /kinkie
