Re: [SLUG] ISA Servers and Linux

2003-11-22 Thread Heracles
On Friday 21 Nov 2003 2:14 am, [EMAIL PROTECTED] wrote:
 Heracles [EMAIL PROTECTED] writes:
  Go to devel.squid-cache.org. There is a link there to a
  basic-NTLM translating proxy. ISA is almost certainly
  configured to require NTLM authentication.
 
  Yes, I know about the translation proxy. The proxy file is
  called aps098.tar.gz and expands to a series of files that
  run under python. The program runs, but does not seem to
  authenticate. Has anyone got it working? Is there an
  undocumented feature that I have missed?

 I use it, it's a life saver.
 here's a bit of my config:

snip
Thanks, after reviewing your file I found my error. All works 
really well now.
Thanks again, silly error on my part.

Stay well and happy
Heracles

-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


[SLUG] ISA Servers and Linux

2003-11-20 Thread Heracles
I have installed the python program (and it runs fine) but still 
cannot connect to the internet through our ISA Server. I have 
followed the instructions exactly, but still don't seem to 
authenticate.
Has anyone been able to browse the net through an ISA server with 
Mozilla using the aps098 program? If so, how was it done? Changes 
to the server are not possible.

TIA
Stay well and happy
Heracles 
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] ISA Servers and Linux

2003-11-20 Thread Robert Collins
On Thu, 2003-11-20 at 22:41, Heracles wrote:
 I have installed the python program (and it runs fine) but still 
 cannot connect to the internet through our ISA Server. I have 
 followed the instructions exactly, but still don't seem to 
 authenticate.
 Has anyone been able to browse the net through an ISA server with 
 Mozilla using the aps098 program? If so, how was it done? Changes 
 to the server are not possible.

Go to devel.squid-cache.org. There is a link there to a basic-NTLM
translating proxy. ISA is almost certainly configured to require NTLM
authentication.

Rob
-- 
GPG key available at: http://www.robertcollins.net/keys.txt.


signature.asc
Description: This is a digitally signed message part
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] ISA Servers and Linux

2003-11-20 Thread Heracles
On Thursday 20 Nov 2003 10:59 pm, Robert Collins wrote:
 On Thu, 2003-11-20 at 22:41, Heracles wrote:
  I have installed the python program (and it runs fine) but
  still cannot connect to the internet through our ISA Server.
  I have followed the instructions exactly, but still don't
  seem to authenticate.
  Has anyone been able to browse the net through an ISA server
  with Mozilla using the aps098 program? If so, how was it
  done? Changes to the server are not possible.

 Go to devel.squid-cache.org. There is a link there to a
 basic-NTLM translating proxy. ISA is almost certainly
 configured to require NTLM authentication.

Yes, I know about the translation proxy. The proxy file is called 
aps098.tar.gz and expands to a series of files that run under 
python. The program runs, but does not seem to authenticate.
Has anyone got it working? Is there an undocumented feature that I 
have missed?

Stay well and happy
Heracles

 


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] ISA Servers and Linux

2003-11-20 Thread umug
Heracles [EMAIL PROTECTED] writes:

 Go to devel.squid-cache.org. There is a link there to a
 basic-NTLM translating proxy. ISA is almost certainly
 configured to require NTLM authentication.

 Yes, I know about the translation proxy. The proxy file is called 
 aps098.tar.gz and expands to a series of files that run under 
 python. The program runs, but does not seem to authenticate.
 Has anyone got it working? Is there an undocumented feature that I 
 have missed?

I use it, it's a life saver. 
here's a bit of my config:

[GENERAL]
LISTEN_PORT:8081
# obviously 8081 needs to be free, 
# otherwise the proxy exits with an error.
PARENT_PROXY:isa.umug.org
PARENT_PROXY_PORT:8080
ALLOW_EXTERNAL_CLIENTS:0
FRIENDLY_IPS: 192.168.1.2 192.168.1.3
URL_LOG:1

[CLIENT_HEADER]
# all on one line
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/msword, 
application/vnd.ms-powerpoint, */*

User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)

[NTLM_AUTH]
NT_HOSTNAME:PUMUG
NT_DOMAIN:UMUG
USER:umug
PASSWORD:umug12
LM_PART:1
NT_PART:0
NTLM_FLAGS: 0682
NTLM_TO_BASIC:0

to test with wget

export http_proxy=http://localhost:8081
wget slug.org.au

The only other things I could suggest is changing NT_HOSTNAME to
a working windows box, just in case only certain hostnames are
allowed through, and read the comments in the config file about
LM_PART, NT_PART and NTLM_FLAGS.

I don't use the NTLM_TO_BASIC option, so if that's the part that isn't
working for you, I could test it out for you later, if you like.
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug


Re: [SLUG] ISA Servers and Linux

2003-11-20 Thread Robert Collins
On Thu, 2003-11-20 at 23:06, Heracles wrote:

 Yes, I know about the translation proxy. The proxy file is called 
 aps098.tar.gz and expands to a series of files that run under 
 python. The program runs, but does not seem to authenticate.
 Has anyone got it working? Is there an undocumented feature that I 
 have missed?

Ah, I didn't realise that that is what you where using.

Does it have a debug log you can review to see whats happening?

Rob

-- 
GPG key available at: http://www.robertcollins.net/keys.txt.


signature.asc
Description: This is a digitally signed message part
-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug