[squid-users] Cache NTLM Authenticaion

[Andre Bolinhas]

Hi

It's possible squid cache NTLM authentication from users?

My goal is to store the credentials in cache in order to reduce the 
request to Active Directory.


I'm trying guide from this squid : auth_param configuration directive 
(squid-cache.org)  
but there is no information relative to cache the authentication / 
credentials.


Also, in NTLM did you recommend to use the keep_alive option?

Best regards

___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache NTLM Authenticaion

[Amos Jeffries]

On 27/10/23 14:08, Andre Bolinhas wrote:

Hi

It's possible squid cache NTLM authentication from users?



NTLM tokens are unique per TCP connection. So no, caching is a pointless 
waste of CPU and memory. The best that can be done already is.



My goal is to store the credentials in cache in order to reduce the 
request to Active Directory.




The only way to do that is to reduce unique TCP connections between 
clients and Squid.


Check that 
 
directive is either absent or turned "on" explicitly.




I'm trying guide from this squid : auth_param configuration directive 
(squid-cache.org)  
but there is no information relative to cache the authentication / 
credentials.


Also, in NTLM did you recommend to use the keep_alive option?


If it works, yes. Though be aware it only affects the initial request of 
the NTLM handshake.



Cheers
Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache NTLM Authenticaion

[Andre Bolinhas]

Anyone can help me with this please.
I just want to know if it's possible or not, and if it's possible how to.

Best regards

On 27/10/2023 02:08, Andre Bolinhas wrote:


Hi

It's possible squid cache NTLM authentication from users?

My goal is to store the credentials in cache in order to reduce the 
request to Active Directory.


I'm trying guide from this squid : auth_param configuration directive 
(squid-cache.org)  
but there is no information relative to cache the authentication / 
credentials.


Also, in NTLM did you recommend to use the keep_alive option?

Best regards

___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache NTLM Authenticaion

[Francesco Chemolli]

Hi Andre,
  in short: it's not possible in modern Windows environment, especially if
backed by Active Directory.


On Thu, Nov 2, 2023 at 12:09 AM Andre Bolinhas <
andre.bolin...@articatech.com> wrote:

> Anyone can help me with this please.
> I just want to know if it's possible or not, and if it's possible how to.
>
> Best regards
> On 27/10/2023 02:08, Andre Bolinhas wrote:
>
> Hi
>
> It's possible squid cache NTLM authentication from users?
>
> My goal is to store the credentials in cache in order to reduce the
> request to Active Directory.
>
> I'm trying guide from this squid : auth_param configuration directive
> (squid-cache.org)  but
> there is no information relative to cache the authentication / credentials.
>
> Also, in NTLM did you recommend to use the keep_alive option?
>
> Best regards
>
>
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> https://lists.squid-cache.org/listinfo/squid-users
>


-- 
Francesco
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache NTLM Authenticaion

[Andre Bolinhas]

Hi Francesco Chemolli

Many thanks for your reply.

In your opinion, keep alive should be used within NTLM, it increases 
performance?


Best regards

On 02/11/2023 18:58, Francesco Chemolli wrote:

Hi Andre,
  in short: it's not possible in modern Windows environment, 
especially if backed by Active Directory.



On Thu, Nov 2, 2023 at 12:09 AM Andre Bolinhas 
 wrote:


Anyone can help me with this please.
I just want to know if it's possible or not, and if it's possible
how to.

Best regards

On 27/10/2023 02:08, Andre Bolinhas wrote:


Hi

It's possible squid cache NTLM authentication from users?

My goal is to store the credentials in cache in order to reduce
the request to Active Directory.

I'm trying guide from this squid : auth_param configuration
directive (squid-cache.org)
 but there is
no information relative to cache the authentication / credentials.

Also, in NTLM did you recommend to use the keep_alive option?

Best regards



___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users



--
    Francesco___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache NTLM Authenticaion

[Francesco Chemolli]

Hi Andre,
  More than that. Without keep-alive, NTLM over HTTP will not work at all.

@mobile


On Thu, 2 Nov 2023 at 23:11, Andre Bolinhas 
wrote:

> Hi Francesco Chemolli
>
> Many thanks for your reply.
>
> In your opinion, keep alive should be used within NTLM, it increases
> performance?
>
> Best regards
> On 02/11/2023 18:58, Francesco Chemolli wrote:
>
> Hi Andre,
>   in short: it's not possible in modern Windows environment, especially if
> backed by Active Directory.
>
>
> On Thu, Nov 2, 2023 at 12:09 AM Andre Bolinhas <
> andre.bolin...@articatech.com> wrote:
>
>> Anyone can help me with this please.
>> I just want to know if it's possible or not, and if it's possible how to.
>>
>> Best regards
>> On 27/10/2023 02:08, Andre Bolinhas wrote:
>>
>> Hi
>>
>> It's possible squid cache NTLM authentication from users?
>>
>> My goal is to store the credentials in cache in order to reduce the
>> request to Active Directory.
>>
>> I'm trying guide from this squid : auth_param configuration directive
>> (squid-cache.org) 
>> but there is no information relative to cache the authentication /
>> credentials.
>>
>> Also, in NTLM did you recommend to use the keep_alive option?
>>
>> Best regards
>>
>>
>> ___
>> squid-users mailing list
>> squid-users@lists.squid-cache.org
>> https://lists.squid-cache.org/listinfo/squid-users
>>
>
>
> --
> Francesco
>
>
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Cache NTLM Authenticaion

[Andre Bolinhas]

Hi Francesco Chemolli

oohhh, strange, I always use keep_alived off and authentication/NTLM 
works perfectly.


auth_param ntlm program /usr/bin/ntlm_auth --domain=ARTICATECH2012.LAB 
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 20 startup=5 idle=1 concurrency=0 queue-size=80 
on-persistent-overload=ERR

auth_param ntlm keep_alive off

I just want to know if keep_alive on increase performance of 
squid/authentication and if not create issues on POST/PUT requests.


Best regards

On 02/11/2023 23:32, Francesco Chemolli wrote:

Hi Andre,
  More than that. Without keep-alive, NTLM over HTTP will not work at all.

@mobile


On Thu, 2 Nov 2023 at 23:11, Andre Bolinhas 
 wrote:


Hi Francesco Chemolli

Many thanks for your reply.

In your opinion, keep alive should be used within NTLM, it
increases performance?

Best regards

On 02/11/2023 18:58, Francesco Chemolli wrote:

Hi Andre,
  in short: it's not possible in modern Windows environment,
especially if backed by Active Directory.


On Thu, Nov 2, 2023 at 12:09 AM Andre Bolinhas
 wrote:

Anyone can help me with this please.
I just want to know if it's possible or not, and if it's
possible how to.

Best regards

On 27/10/2023 02:08, Andre Bolinhas wrote:


Hi

It's possible squid cache NTLM authentication from users?

My goal is to store the credentials in cache in order to
reduce the request to Active Directory.

I'm trying guide from this squid : auth_param configuration
directive (squid-cache.org)
 but
there is no information relative to cache the authentication
/ credentials.

Also, in NTLM did you recommend to use the keep_alive option?

Best regards



___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users



-- 
    Francesco
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users