Heracles <[EMAIL PROTECTED]> writes:

>> Go to devel.squid-cache.org. There is a link there to a
>> basic->NTLM translating proxy. ISA is almost certainly
>> configured to require NTLM authentication.
>
> Yes, I know about the translation proxy. The proxy file is called 
> aps098.tar.gz and expands to a series of files that run under 
> python. The program runs, but does not seem to authenticate.
> Has anyone got it working? Is there an undocumented feature that I 
> have missed?

I use it, it's a life saver. 
here's a bit of my config:

[GENERAL]
LISTEN_PORT:8081
# obviously 8081 needs to be free, 
# otherwise the proxy exits with an error.
PARENT_PROXY:isa.umug.org
PARENT_PROXY_PORT:8080
ALLOW_EXTERNAL_CLIENTS:0
FRIENDLY_IPS: 192.168.1.2 192.168.1.3
URL_LOG:1
                                                                                
[CLIENT_HEADER]
# all on one line
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/msword, 
application/vnd.ms-powerpoint, */*

User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
                                                                                
[NTLM_AUTH]
NT_HOSTNAME:PUMUG
NT_DOMAIN:UMUG
USER:umug
PASSWORD:umug12
LM_PART:1
NT_PART:0
NTLM_FLAGS: 06820000
NTLM_TO_BASIC:0
                                                                                
to test with wget

export http_proxy=http://localhost:8081
wget slug.org.au

The only other things I could suggest is changing NT_HOSTNAME to
a working windows box, just in case only certain hostnames are
allowed through, and read the comments in the config file about
LM_PART, NT_PART and NTLM_FLAGS.

I don't use the NTLM_TO_BASIC option, so if that's the part that isn't
working for you, I could test it out for you later, if you like.
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to