I have squid setup to authenticate with my Active Directory. On my internal
network it works and even does single sign-on. Externally, it prompts for user
name and password (which is what I wanted really...), but no matter if I use a
correct or incorrect login it rejects the login, keeps prompting and eventually
says Cache Access Denied. I am guessing that it is saying Cache Access Denied
because when you are on an external network you logged in with a cached version
of your AD account, but why is it rejecting the authentication attempt through
squid?
Squid.conf
http_port 8086
logformat common %>a %la %tl %ru %Ss %Ssh
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm keep_alive on
auth_param basic children 120
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
authenticate_ttl 0 seconds
...
acl authenticated proxy_auth REQUIRED
...
http_access allow authenticated
http_access deny all
I just cut out the acls dealing with allowed and blocked sites.
Is it because on an external network the computer can't actively authenticate
against the AD that squid is just rejecting the login? If so, any suggestions
on other external authentication methods (I don't want to do a simple user/pass
setup)[This is a company environment]? If not, any ideas on why it is not
accepting login on an external network, and how can I fix it?
-Josh Phillips
Judicial Correction Services IT
