[squid-users] Squid 3.5.x and NTLM

FredB fredbmail at free.fr
Mon Nov 28 13:26:18 UTC 2016



> The SMB_LM helper performs a downgrade attack on the NTLM protocol
> and
> decrypts the resulting username and password. Then logs into AD using
> Basic auth.
>  This requires that the client supports the extremely insecure LM
>  auth.
> Any sane client will not.
> 
> Alternatively, the 'fake' helper accepts any credentials the client
> presents as long as they are correctly formatted in NTLM syntax.

Thanks, It's what the old helper ntlm_smb_lm_auth does ?


More information about the squid-users mailing list