Hello, I unfortunately got no further response. Through experimentation I discovered that this issue is magically gone in the more current versions of Squid, for example in 3.4.8.
So far, so good. Now I have discovered that CPU usage (when using ntlm_auth) is pegged at 100%, rendering the server useless. Rock : hard place. On 7 October 2014 21:25, Marcel <lord....@gmail.com> wrote: > Hello, > > thank you for your input. Unfortunately I have to disagree with you > because of two reasons: > > 1. That option is already enabled > 2. The NTLM authentication works fine in Internet Explorer without Squid. > It only breaks when going through Squid. > > I'd be very happy for further suggestions. > > > > On 7 October 2014 21:19, Brendan Kearney <bpk...@gmail.com> wrote: > >> On Tue, 2014-10-07 at 20:50 +0200, Marcel wrote: >> > Hello, >> > >> > I have some more information. >> > >> > The problem seems to have nothing to do with samba, krb5 or anything >> > else. I set up a new squid that isn't in the AD and doesn't use any >> > kind of authentication at all. >> > >> > >> > I have the exact same problem. Here is my POC squid.conf: >> > >> > acl localnet src all >> > http_access allow all >> > http_port 3128 >> > >> > >> > >> > That is the entire configuration in my tests. As you can see, it is >> > absolutely impossible for it to be a configuration issue. >> > >> > Why can't I log on to a NTLM protected website with Internet Explorer >> > when going over a squid proxy? >> > >> > >> > It works fine in Firefox. >> > >> > >> > >> > ---------- Forwarded message ---------- >> > From: foggle <lord....@gmail.com> >> > Date: 7 October 2014 18:10 >> > Subject: [squid-users] Problems with NTLM authentication >> > To: squid-users@lists.squid-cache.org >> > >> > >> > Hello, >> > >> > I have set up a squid Proxy that uses samba/ntlm/krb5 to do SSO AD >> > authentication in the Company. >> > >> > >> > This works fine. >> > >> > My problem is that external Websites on the Internet that use NTLM >> > authentication of their own do not work. My users enter their Details >> > (DOMAIN\user and Password) and receive authentication failures >> > Messages. >> > >> > Interestingly enough, this (almost) only occurs in Internet Explorer. >> > The >> > same sites work fine with Firefox. >> > >> > Thank you in advance for your much needed help. >> > >> > >> > >> > -- >> > View this message in context: >> > >> http://squid-web-proxy-cache.1019090.n4.nabble.com/Problems-with-NTLM-authentication-tp4667742.html >> > Sent from the Squid - Users mailing list archive at Nabble.com. >> > _______________________________________________ >> > squid-users mailing list >> > squid-users@lists.squid-cache.org >> > http://lists.squid-cache.org/listinfo/squid-users >> > >> > >> > >> > _______________________________________________ >> > squid-users mailing list >> > squid-users@lists.squid-cache.org >> > http://lists.squid-cache.org/listinfo/squid-users >> >> not something that squid would be affecting, as squid has nothing to do >> with the auth to the website. >> >> Tools -> Internet Options -> Advanced tab: scroll down until you >> Security. Under Security, check the "Enable Integrated Windows >> Authentication*" check box, and restart your browser. >> >> >
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
