Re: [squid-users] A first crack at NTLM - 90% there :)

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 20 Oct 2005 20:09:46 +0200 (CEST)

On Wed, 19 Oct 2005, Gabriel Gunderson wrote:

> My questions are:
>
> 1) Do I even need a "basic" auth_param? All the examples I see have
> ntlm and basic. What would be the need to have both?

Not all browsers or plugins supports NTLM authentication.

> 2) What does this top log entry show? Why would I have it if the
> user is authed with ntlm? Wouldn't they all show "DOMAIN+admin" or
> whatever? (example below)
> ...
> - NONE/- text/html
> DOMAIN+admin DIRECT/72.14.203.19 text/html
> ...

Most likely the NONE/- is the summary of the "authenitcation required"
responses sent by Squid. NTLM authentication is by design quite chatty,
and there is often more "authentication required" messages than successful
requests..

> TCP_DENIED/407 585 GET http://mail.google.com/mail/? - NONE/- text/html

This is "authenitcation required".

Regards
Henrik
Received on Thu Oct 20 2005 - 12:09:48 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Nov 01 2005 - 12:00:04 MST