[squid-users] R: [squid-users] NTLM v2

2010-01-07 Thread Guido Serassio
Hi,

You cannot force the NTLM version: the choiche is done from the Windows SSPI on 
the proxy machine during the negotiate phase, and NTLMv2 can be used only if 
both the peers are able to use it.

Look here for more details:
http://davenport.sourceforge.net/ntlm.html

I don't know if Apache httpclient is able to use NTLMv2.

Regards

Guido Serassio
Acme Consulting S.r.l.
Microsoft Gold Certified Partner
VMware Professional Partner
Via Lucia Savarino, 110098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135   Fax. : +39.011.9781115
Email: guido.seras...@acmeconsulting.it
WWW: http://www.acmeconsulting.it


 -Messaggio originale-
 Da: Ho, Oiling [mailto:oiling...@credit-suisse.com]
 Inviato: mercoledì 6 gennaio 2010 18.16
 A: Guido Serassio; squid-users@squid-cache.org
 Cc: Svanes, Torkel
 Oggetto: RE: [squid-users] NTLM v2
 
 Hi,
 
 Thanks for your reply. Is there a way we can configure squid to use only
 NTLMV2? Can we tell from one of the log files if NTLMV2 is used instead
 NTLMV1?
 
 Instead of using a windows browser to connect to squid, I am connecting to
 squid using a Apache Httpclient.
 
 Thanks,
 Oiling
 
 
 -Original Message-
 From: Guido Serassio [mailto:guido.seras...@acmeconsulting.it]
 Sent: Wednesday, January 06, 2010 11:44 AM
 To: Ho, Oiling; squid-users@squid-cache.org
 Subject: R: [squid-users] NTLM v2
 
 Hi,
 
 On Windows, the native NTLM helper, when running on a domain member
 machine, will always negotiate the highest usable NTLM protocol version,
 so if both the authentication peers can use NTLMv2, NTLMv2 is
 automatically selected.
 
 Please note that, if you want to USE NTLMv2, you need to have a Windows
 Domain and you must use domain accounts only. All Windows modern browser
 are NTLMv2 capable.
 
 Regards
 
 Guido
 
 Guido Serassio
 Acme Consulting S.r.l.
 Microsoft Gold Certified Partner
 Via Lucia Savarino, 110098 - Rivoli (TO) - ITALY
 Tel. : +39.011.9530135   Fax. : +39.011.9781115
 Email: guido.seras...@acmeconsulting.it
 WWW: http://www.acmeconsulting.it
 
 
  -Messaggio originale-
  Da: Ho, Oiling [mailto:oiling...@credit-suisse.com]
  Inviato: martedì 5 gennaio 2010 16.23
  A: squid-users@squid-cache.org
  Oggetto: [squid-users] NTLM v2
 
  Hi All,
 
  I have squid running on windows XP as a proxy server, I set up my
  computer to use NTLM V2 according to this link
  http://www.imss.caltech.edu/cms.php?op=wikiwiki_op=viewid=396 and
  rebooted my machine, then I used apache http client to connect to
  squid, it should not work since apache does not support NTLM V2, but
  somehow I was able to connect. Does anyone know what is going on? How
  can I tell from squid if it is using NTLM V1 or NTLM V2?
 
  Thanks,
  Oiling
 
  ==
  
  =
   Please access the attached hyperlink for an important electronic
  communications disclaimer:
   http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html
 
  ==
  
  =
 
 
 ==
 =
  Please access the attached hyperlink for an important electronic
 communications disclaimer:
  http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html
 
 ==
 =
 


[squid-users] R: [squid-users] NTLM v2

2010-01-06 Thread Guido Serassio
Hi,

On Windows, the native NTLM helper, when running on a domain member machine, 
will always negotiate the highest usable NTLM protocol version, so if both the 
authentication peers can use NTLMv2, NTLMv2 is automatically selected.

Please note that, if you want to USE NTLMv2, you need to have a Windows Domain 
and you must use domain accounts only. All Windows modern browser are NTLMv2 
capable. 

Regards 

Guido

Guido Serassio
Acme Consulting S.r.l.
Microsoft Gold Certified Partner
Via Lucia Savarino, 110098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135   Fax. : +39.011.9781115
Email: guido.seras...@acmeconsulting.it
WWW: http://www.acmeconsulting.it


 -Messaggio originale-
 Da: Ho, Oiling [mailto:oiling...@credit-suisse.com]
 Inviato: martedì 5 gennaio 2010 16.23
 A: squid-users@squid-cache.org
 Oggetto: [squid-users] NTLM v2
 
 Hi All,
 
 I have squid running on windows XP as a proxy server, I set up my
 computer to use NTLM V2 according to this link
 http://www.imss.caltech.edu/cms.php?op=wikiwiki_op=viewid=396 and
 rebooted my machine, then I used apache http client to connect to squid,
 it should not work since apache does not support NTLM V2, but somehow I
 was able to connect. Does anyone know what is going on? How can I tell
 from squid if it is using NTLM V1 or NTLM V2?
 
 Thanks,
 Oiling
 
 ==
 =
  Please access the attached hyperlink for an important electronic
 communications disclaimer:
  http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html
 
 ==
 =
 


[squid-users] R: [squid-users] NTLM v2

2009-12-18 Thread Guido Serassio
Hi, 

You are already using NTLMv2.

As you can read in the provided documentation, mswin_ntlm_auth.exe supports 
both NTLM/NTLMv2.

Regards

Guido Serassio
Acme Consulting S.r.l.
Microsoft Gold Certified Partner
Via Lucia Savarino, 110098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135   Fax. : +39.011.9781115
Email: guido.seras...@acmeconsulting.it
WWW: http://www.acmeconsulting.it


 -Messaggio originale-
 Da: Ho, Oiling [mailto:oiling...@credit-suisse.com]
 Inviato: venerdì 18 dicembre 2009 22.20
 A: squid-users@squid-cache.org
 Oggetto: [squid-users] NTLM v2
 
 Hi,
 
 I am running squid 2.7 on windows and it is configured to use NTLM
 authentication. Does any know how to configure it to use NTLM v2 on
 windows?
 
 Thanks,
 Oiling
 
 
 
 ==
 =
  Please access the attached hyperlink for an important electronic
 communications disclaimer:
  http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html
 
 ==
 =