From: K R, Bharath
Sent: Thursday, September 29, 2022 10:31 PM
To: squid-users@lists.squid-cache.org
Cc: Kasat, Puneeth Kumar <pka...@informatica.com>; Boddupalli, Vikram 
<vboddupa...@informatica.com>; Uppal, Tanjot Singh <tup...@informatica.com>
Subject: NTLM V2 Set up for Squid issue

Hi Team,

We see the below error while configuring Squid for NTLM V2.

1664469456.486     73 10.65.140.107 TCP_DENIED/407 4408 GET 
http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469461.446     67 10.65.140.107 TCP_DENIED/407 4408 GET 
http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469466.478     96 10.65.140.107 TCP_DENIED/407 4408 GET 
http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469471.497    102 10.65.140.107 TCP_DENIED/407 4408 GET 
http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469476.478     88 10.65.140.107 TCP_DENIED/407 4408 GET 
http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469481.454     46 10.65.140.107 TCP_DENIED/407 4408 GET 
http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469612.625     34 10.65.140.107 TCP_DENIED/407 4326 CONNECT 
push.services.mozilla.com:443 - HIER_NONE/- text/html



auth_param ntlm program /usr/bin/ntlm_auth --diagnostics 
--helper-protocol=squid-2.5-ntlmssp --domain=xxxxx.com
auth_param ntlm children 10
auth_param ntlm keep_alive off


auth_param ntlm program /usr/lib/squid/ntlm_auth xxxx.com/xxxxx.informatica.com
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes


acl ntlm_users proxy_auth REQUIRED
http_access allow ntlm_users
#http_access deny all

NOTE: Our wbinfo component is working as expected.

We made use of https://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm 
for doc.

Regards,
Bharath

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to