Can someone confirm this or has an idea what I could check for ?
Thank you
Markus
"Markus Moeller" <[email protected]> wrote in message
news:[email protected]...
I did some further tests and noticed the following:
1) IE with squid 3.0 works using my wrapper (See ie-nego-3.0.tgz)
2) Polygraph with squid 3.0 fails for ntlm (either via negotiate-ntlm or
pure ntlm) ( See polygraph-4.3.1-3.0.tgz
3) Polygraph with squid 3.2 works for ntlm but fails negotiate-ntlm (See
polygraph-4.3.1-3.2.tgz)
Markus
"Markus Moeller" <[email protected]> wrote in message
news:[email protected]...
Hi,
I try to use my negotiate-wrapper with auth_ntlm and squid-3.2 and see
that the helper returns TT ... and squid logs
2011/03/20 13:08:19.544 kid1| negotiate/negotiateUserRequest.cc(201)
authenticate: need to challenge client
'TlRMTVNTUAACAAAAEgASADAAAAAFgomivxsqHXpxr1kAAAAAAAAAAHQAdABCAAAAVwBJAE4AMgAwADAAMwBSADIAAgASAFcASQBOADIAMAAwADMAUgAyAAEAFABPAFAARQBOAFMAVQBTAEUAMQAxAAQAEgBzAHUAcwBlAC4AaABvAG0AZQADACgAbwBwAGUAbgBzAHUAcwBlADEAMQAuAHMAdQBzAGUALgBoAG8AbQBlAAAAAAA='!
but in the wireshark log I don't see a proxy-authenticate header line to
challenge the client. What could be the reason ?
When I switch to Negotiate-Kerberos everything works.
Attached are the config and log files.
Markus
