Re: [squid-users] squid auth. using basic and ntlm at the same time

[Henrik Nordstrom]

On Thu, 27 Jan 2005, Xavier Callejas wrote:
I want that IE don't ask for a passwd, and msn messeger can work.
Hard to do, given the fact that both clients are seriously broken in their 
authentication support. You have to select one as you can only work 
around one of the clients at a time.

If you have a Microsoft support contract I would suggest using this to 
request Microsoft to improve the quality of the authentication support in 
MSIE and MSN Messenger, to allow both programs to be used proper with a 
proxy requiring authenitcation.

Regards
Henrik

[squid-users] squid auth. using basic and ntlm at the same time

[Xavier Callejas]

Hi.

I have runing a squid proxy that use ntlm to restict internet user access with 
my samba 3.x PDC.

But some windows programs need to use basic auth (like msn messenger) how can 
I do to IE  get ntlm auth, and the others program get basic auth.

my squid.conf is

# ntlm
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 hour
auth_param ntlm use_ntlm_negotiate off

# basic
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param basic realm Servidor de acceso a Internet
auth_param basic credentialsttl 2 hour
auth_param basic casesensitive off

in that order.

But like that IE works fine, but msn messenger don't, seems to be like msn 
mssgr don't get the basic auth config.

Buth if I revert the order, basic first, IE ask for user and password and msn 
mssgr works fine.

I want that IE don't ask for a passwd, and msn messeger can work.

thanks.


-- 
Xavier Callejas

El Salvador
E-Mail + MSN: xcallejas at ibcinc.com.sv
ICQ: 6224
--
Open your Mind, use Open Source.