I've found failing component. It’s external_acl_type with the %LOGIN parameter. It starts some kind of authentification if it thinks user is not authenticated. And that procedure force IE on XP to open login window. I think theat procedure is different one than in squid_kerb_auth' ACL. How can I help to determine root cause if this issue?
> -----Original Message----- > From: Игорь Потапов [mailto:potapo...@vnipigaz.gazprom.ru] > Sent: Tuesday, March 13, 2012 10:44 AM > To: squid-users@squid-cache.org > Subject: [squid-users] Login Popups on Windows XP with squid_kerb_auth and > external acl > > Hi. > squid is 3.1.19 on FreeBSD 8.2 with MIT kerberos. squid_kerb_auth is in use > as the only > auth scheme. Have some external acl to check authorization in mysql db. On > machines > running XP SP2 with IE8 (enabled Windows Intergrated Auth) sometimes > authentication > windows popup. I think this is happening if some request is denied by > external auth > script. If I hit Cancel page loads further. On Windows 7 see no such behavior. > Config is here http://pastebin.com/QyCiha8Q Here is external auth script > http://pastebin.com/LiAmniSz I think IE8 on XP sometimes doesn't send > Authorization and > asks for it. Or falls back to NTLM. I've made some workarounds to disable > login windows > but on XP they appear. > Can I force IE8 on XP to use only negotiate/Kerberos?
