What are the problems?

There are two issues:

1) squid doing user auth via ACL 
2) squid forwards / passthrough auth to IIS

Are there any squid-parent proxies involved?


Normally

http_port 8080 connection-auth=on

where connection-auth is on per default? That means, that ntlm-auth is passed 
through squid. Which samba/winbind version are you using. For IE10 and up you 
have to use "newer" versions (i think > 3.6.x)


markus


-----Ursprüngliche Nachricht-----
Von: Antero Prazeres [mailto:[email protected]] 
Gesendet: Mittwoch, 2. April 2014 13:21
An: [email protected]
Betreff: [squid-users] NTLM problem with Internet explorer/windows

Hello,
I need some help with this issue as I am out of ideas and I don¹t find any 
similar issues on your lists/emails/faqs.
I am using a server with CentOS6 and Squid 3.1.10 as a proxy. One of my teams 
needs to access to ISS 7 trough Squid for test and development purposes using 
only NTLM. Squid server is accessing the AD and credentials are working. All 
tests performed with Wbinfo are successful. The access to the IIS ntlm site is 
successful from Firefox and Safari, all returning the message ³you are 
authenticated using NTLM². I try to perform the same test on several machines 
with Windows 7 and Internet Explorer, most of them 11, and don¹t work. GPO was 
altered on the windows for NTLM, ISS site is requesting NTLM with extended 
protection and kernel=mode authentication off.

Somebody as any ideas please??

Thank you

Best regards

Antero Prazeres



This email and any attachments may contain confidential and proprietary 
information of Blackboard that is for the sole use of the intended recipient. 
If you are not the intended recipient, disclosure, copying, re-distribution or 
other use of any of this information is strictly prohibited. Please immediately 
notify the sender and delete this transmission if you received this email in 
error.

Reply via email to