RE: [squid-users] OWA accelerator authentication weirdness

2009-01-16 Thread Alan Lehman
> Yes. Multiple authentication methods, triggered from multiple sources, > going via multiple paths can be confusing. > > Squid auth_param elided, which leaves: > > "A user name and password are being requested by ..." > == basic challenge by ISA. > > "Enter user name and password for ..."

RE: [squid-users] OWA accelerator authentication weirdness

2009-01-14 Thread Amos Jeffries
>> > That's terrific that it works, but I'm not sure I understand why. >> Does "connection-auth=off" disable pass-through of NTLM? My >> understanding of the Activesync devices is that they require NTLM. >> > >> >> Yes it disables pass-thru for NTLM. >> >> Which for you blocks that first NTLM chall

RE: [squid-users] OWA accelerator authentication weirdness

2009-01-14 Thread Alan Lehman
> > That's terrific that it works, but I'm not sure I understand why. > Does "connection-auth=off" disable pass-through of NTLM? My > understanding of the Activesync devices is that they require NTLM. > > > > Yes it disables pass-thru for NTLM. > > Which for you blocks that first NTLM challenge (

Re: [squid-users] OWA accelerator authentication weirdness

2009-01-13 Thread Amos Jeffries
Alan Lehman wrote: Try some of the settings to disable pass-thru on the specific ports and/or peer: http://wiki.squid-cache.org/Features/ConnPin My config pretty much follows the wiki example for OWA accelerator. Squid 3.1.0.3. I'm using the same port for OWA and Activesync. I just added c

RE: [squid-users] OWA accelerator authentication weirdness

2009-01-13 Thread Alan Lehman
> Try some of the settings to disable pass-thru on the specific > ports > and/or peer: > > http://wiki.squid-cache.org/Features/ConnPin > >>> > >>> My config pretty much follows the wiki example for OWA accelerator. > >> Squid 3.1.0.3. I'm using the same port for OWA and Actives

Re: [squid-users] OWA accelerator authentication weirdness

2009-01-10 Thread Amos Jeffries
Alan Lehman wrote: The order in which our auth_param lines are configured can alter the first authentication method tried. You will need to look at the debugging trace in cache.log to see which is generating which question Amos Only basic is enabled: auth_param basic children 5 auth_param ba

RE: [squid-users] OWA accelerator authentication weirdness

2009-01-10 Thread Alan Lehman
> The order in which our auth_param lines are configured can alter > the > first authentication method tried. You will need to look at the > debugging trace in cache.log to see which is generating which > >> question > Amos > >>> Only basic is enabled: > >>> auth_param basic chi

Re: [squid-users] OWA accelerator authentication weirdness

2009-01-10 Thread Amos Jeffries
Alan Lehman wrote: The order in which our auth_param lines are configured can alter the first authentication method tried. You will need to look at the debugging trace in cache.log to see which is generating which question Amos Only basic is enabled: auth_param basic children 5 auth_param basi

RE: [squid-users] OWA accelerator authentication weirdness

2009-01-10 Thread Alan Lehman
> >> The order in which our auth_param lines are configured can alter the > >> first authentication method tried. You will need to look at the > >> debugging trace in cache.log to see which is generating which > question > >> > >> Amos > > > > Only basic is enabled: > > auth_param basic children 5

Re: [squid-users] OWA accelerator authentication weirdness

2009-01-08 Thread Amos Jeffries
Alan Lehman wrote: The order in which our auth_param lines are configured can alter the first authentication method tried. You will need to look at the debugging trace in cache.log to see which is generating which question Amos Only basic is enabled: auth_param basic children 5 auth_param ba

Re: [squid-users] OWA accelerator authentication weirdness

2009-01-08 Thread Amos Jeffries
Alan Lehman wrote: The order in which our auth_param lines are configured can alter the first authentication method tried. You will need to look at the debugging trace in cache.log to see which is generating which question Amos Only basic is enabled: auth_param basic children 5 auth_param ba

RE: [squid-users] OWA accelerator authentication weirdness

2009-01-08 Thread Alan Lehman
> The order in which our auth_param lines are configured can alter the > first authentication method tried. You will need to look at the > debugging trace in cache.log to see which is generating which question > > Amos Only basic is enabled: auth_param basic children 5 auth_param basic realm Sq

Re: [squid-users] OWA accelerator authentication weirdness

2009-01-08 Thread Amos Jeffries
Alan Lehman wrote: Running 3.0 my accelerator for OWA works fine. The browser user authentication prompt is "A user name and password are being requested by ..." The same configuration on 2.6STABLE6 or 3.1.0.3 - The browser authentication prompt is now different: "Enter user name and password