RE: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request
What would be the recommended number the ntlm helper threads for a company of 300 users? -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 3:54 AM To: [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer: > That's NTLM handshaking, it's normal behaviour. Blame MS for creating a > crappy implementation of the authentication mechanism. Will get better the day we can switch to use Kerberos/SPNEGO authentication.. but unfortunately not yet sufficiently supported in any of the involved components (browers, Squid, Samba) to be deployed seriously.. The Squid side of things is available in Squid-3, or as a patch to 2.5 at devel.squid-cache.org. The Samba side is available in Samba-4, and the MSIE browser side of things is available in the next Windows version.. Regards Henrik
Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request
Hi, At 12.53 19/04/2006, Henrik Nordstrom wrote: tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer: > That's NTLM handshaking, it's normal behaviour. Blame MS for creating a > crappy implementation of the authentication mechanism. Will get better the day we can switch to use Kerberos/SPNEGO authentication.. but unfortunately not yet sufficiently supported in any of the involved components (browers, Squid, Samba) to be deployed seriously.. The Squid side of things is available in Squid-3, or as a patch to 2.5 at devel.squid-cache.org. The Samba side is available in Samba-4, and the MSIE browser side of things is available in the next Windows version.. Just some updates about: It seems that in the latest Samba 4 sources something is again broken :-( But now there is a binary build of a patched Squid 2.5 STABLE 13 for Windows with full negotiate/Kerberos support. You can find it here (in the download page): http://www.acmeconsulting.it/SquidNT.html Negotiate works fine with Firefox 1.5, SeaMonkey 1.0 and IE 7 BETA 2. Regards Guido - Guido Serassio Acme Consulting S.r.l. - Microsoft Certified Partner Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY Tel. : +39.011.9530135 Fax. : +39.011.9781115 Email: [EMAIL PROTECTED] WWW: http://www.acmeconsulting.it/
RE: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request
Thanks for the feedback. Apparently it's going to take a lot of different components to fix NTLM. Toan -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 3:54 AM To: [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer: > That's NTLM handshaking, it's normal behaviour. Blame MS for creating a > crappy implementation of the authentication mechanism. Will get better the day we can switch to use Kerberos/SPNEGO authentication.. but unfortunately not yet sufficiently supported in any of the involved components (browers, Squid, Samba) to be deployed seriously.. The Squid side of things is available in Squid-3, or as a patch to 2.5 at devel.squid-cache.org. The Samba side is available in Samba-4, and the MSIE browser side of things is available in the next Windows version.. Regards Henrik
Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request
tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer: > That's NTLM handshaking, it's normal behaviour. Blame MS for creating a > crappy implementation of the authentication mechanism. Will get better the day we can switch to use Kerberos/SPNEGO authentication.. but unfortunately not yet sufficiently supported in any of the involved components (browers, Squid, Samba) to be deployed seriously.. The Squid side of things is available in Squid-3, or as a patch to 2.5 at devel.squid-cache.org. The Samba side is available in Samba-4, and the MSIE browser side of things is available in the next Windows version.. Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel
