Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Richard Wall
On 2/18/08, Adrian Chadd [EMAIL PROTECTED] wrote: Thats basically right - Squid doesn't handle the NTLM itself, it just passes the blob right through. The helper framework can handle hundreds of requests a second without too much thought; I'd like to spend some time figuring out what Samba

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Adrian Chadd
G'day, THanks for this stuff. Could you possibly try hitting it hard enough to cause Squid to back up on pending authentications? It'd be good to replicate a fail situation; we can then take that to the samba guys and ask wtf? Adrian On Tue, Feb 19, 2008, Richard Wall wrote: On 2/18/08,

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Adrian Chadd
Oh, and Richard gets a T-shirt, for taking the initiative. :) Adrian

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Richard Wall
On 2/19/08, Adrian Chadd [EMAIL PROTECTED] wrote: G'day, THanks for this stuff. Could you possibly try hitting it hard enough to cause Squid to back up on pending authentications? It'd be good to replicate a fail situation; we can then take that to the samba guys and ask wtf? Adrian,

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Guido Serassio
Hi, At 14:40 19/02/2008, Richard Wall wrote: First problem is that you have to reinterpret the Squid reported hit ratios when using NTLM auth. Only half of these are hits, the other half being TCP_DENIED/407 that form part of the NTLM auth negotiation. This is caused by the NTLM over HTTP

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Richard Wall
On 2/19/08, Guido Serassio [EMAIL PROTECTED] wrote: At 14:40 19/02/2008, Richard Wall wrote: First problem is that you have to reinterpret the Squid reported hit ratios when using NTLM auth. Only half of these are hits, the other half being TCP_DENIED/407 that form part of the NTLM auth

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Guido Serassio
Hi, At 16:36 19/02/2008, Richard Wall wrote: Guido, Yep, I've looked at it, but have not completely absorbed it yet :) But you should, probably it's the better NTLM explanation on the net ... :-) Another question, what type of NTLM authentication is supported by curl ? Lan

[squid-users] NTLM authentication testing

2008-02-18 Thread Adrian Chadd
G'day, I've got one customer who is asking for some testing of Squid in a large NTLM environment. The problem, as those who have tried it will have encountered, is that although Squid can keep up with it, the Samba/Winbind stuff plainly just can't. So I'm looking for some tools to let me craft

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Richard Wall
Hi Adrian, My comments are below. On 2/18/08, Adrian Chadd [EMAIL PROTECTED] wrote: I've got one customer who is asking for some testing of Squid in a large NTLM environment. The problem, as those who have tried it will have encountered, is that although Squid can keep up with it, the

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Adrian Chadd
On Mon, Feb 18, 2008, Richard Wall wrote: This is something that I'm currently very interested in. I had heard that NTLM auth could significantly reduce Squids throughput but haven't seen any figures. I couldn't tell from your message above whether you / your customer has already tried

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Richard Wall
On 2/18/08, Richard Wall [EMAIL PROTECTED] wrote: googling suggests that curl may be able to send NTLM Proxy auth requests. Sorry forgot to include the link: * http://curl.haxx.se/docs/manpage.html#--proxy-ntlm -RichardW.

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Adrian Chadd
On Mon, Feb 18, 2008, Richard Wall wrote: On 2/18/08, Richard Wall [EMAIL PROTECTED] wrote: googling suggests that curl may be able to send NTLM Proxy auth requests. Sorry forgot to include the link: * http://curl.haxx.se/docs/manpage.html#--proxy-ntlm Well, I'll be stuffed:

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Richard Wall
On 2/18/08, Adrian Chadd [EMAIL PROTECTED] wrote: Well, I'll be stuffed: violet:~ adrian$ curl --help | grep ntlm --ntlm Enable HTTP NTLM authentication (H) --proxy-ntlmEnable NTLM authentication on the proxy (H) I wonder how well it'll work. Oh well, time to have a

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Alex Rousskov
On Mon, 2008-02-18 at 21:11 +0900, Adrian Chadd wrote: So I'm looking for some tools to let me craft and fire off NTLM type authentication stuff to a proxy. I don't really care if they're free or not, unix or windows. If anyone knows of anything that'll let me create -lots- of NTLM