Hello list, I just have compiled, configured and get working squid authenticating against an Active Directory. I have set up what groups or users are allowed to concrete resources, and is working well.
The tests were done with a Mozilla browser, so everytime I started the Mozilla I need to put the username/domain/password in the PopUp. But once I try to do it with Windows the PopUp is still emerging (and yes I have configured auth_param ntlm options) Bellow is the captured dialog between the browser and the Squid, you can see how "Proxy-Authenticate: NTLM" header is showed to the browser, but it is beneath "Proxy-Authenticate: Basic" header; and I suspect MSIE so can't handle the NTLM one. Do you know if its possible to change the order that is shown the Proxy-Authenticate headers?? GET http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HTTP/1.1 Accept: */* Accept-Language: es Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 4.0) Host: www.microsoft.com Proxy-Connection: Keep-Alive Cookie: MC1=GUID=272912df2048ef4c95f806c79e6d07ad&HASH=df12&LV=200411&V=3 HTTP/1.0 407 Proxy Authentication Required Server: squid/2.5.STABLE7 Mime-Version: 1.0 Date: Wed, 10 Nov 2004 11:35:44 GMT Content-Type: text/html Content-Length: 1383 Expires: Wed, 10 Nov 2004 11:35:44 GMT X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Proxy-Authenticate: Basic realm="Andorra" Proxy-Authenticate: NTLM X-Cache: MISS from srvproxy.andorra.ad Proxy-Connection: close Thanks a lot, Agustin
