We're running Squid V2.5Stable10 on a Solaris 8 platform and are attempting to get the NTLM authentication working along with basic authentication for non-IE browsers.

So far, IE users that are logged into the domain authenticate without an authentication prompt (good). Non IE users or users of other web clients are prompted for authentication, which is expected, except now they must type in the domain/username and password (i.e. ap1/myname) instead of just their username. That's a bigger change in behaviour than we would like. Is there a way to make this work or is this normal behaviour?

My authentication related configuration:

#Recommended minimum configuration:
auth_param ntlm program /usr/local/squid/libexec/ntlm_auth ap1/as7 ap1/as6
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
auth_param ntlm use_ntlm_negotiate off
auth_param basic program /usr/local/squid/sbin/mac_auth
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
#auth_param basic casesensitive off

-Mike


Reply via email to