Re: [squid-users] Allowing only ntlm clients

2007-11-27 Thread Henrik Nordstrom
On mån, 2007-11-26 at 22:00 -0200, Leonardo Rodrigues Magalhães wrote: > If you have ONLY the 'auth_param ntlm' thing and do NOT have the > 'auth_param basic', so there will be no username/password prompt. There will be a domain logon password prompt if the client agrees on doing NTLM to the prox

Re: [squid-users] Allowing only ntlm clients

2007-11-26 Thread Leonardo Rodrigues Magalhães
If you have ONLY the 'auth_param ntlm' thing and do NOT have the 'auth_param basic', so there will be no username/password prompt. For having the username/password prompt window, you would have to configure a 'basic' authenticator. Configuring the ntlm only, you would probably acchieve

Re: [squid-users] Allowing only ntlm clients

2007-11-26 Thread Adrian Chadd
On Tue, Nov 27, 2007, shacky wrote: > > If you set the authentication scheme to use only ntlm and set the rule > > to allow only traffic that matches that acl. > > Yes, but I don't want the user not to be allowed to surf the Internet > from a computer that isn't connected to the Active Directory d

Re: [squid-users] Allowing only ntlm clients

2007-11-26 Thread shacky
> If you set the authentication scheme to use only ntlm and set the rule > to allow only traffic that matches that acl. Yes, but I don't want the user not to be allowed to surf the Internet from a computer that isn't connected to the Active Directory domain. For example, I don't want the user to u

Re: [squid-users] Allowing only ntlm clients

2007-11-26 Thread Isnard Jaquet
Hi, yes, there are different ways. If you set the authentication scheme to use only ntlm and set the rule to allow only traffic that matches that acl. Example: auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 50 auth_param ntlm keep_

[squid-users] Allowing only ntlm clients

2007-11-26 Thread shacky
Hi. I'm configuring a Squid proxy with the ntlm authentication. Is there a way to allow the Internet access only from the clients connected to the Active Directory domain? Thank you very much! Bye.