[squid-users] NTLM V2 Set up for Squid issue

[K R, Bharath]

From: K R, Bharath
Sent: Thursday, September 29, 2022 10:31 PM
To: squid-users at lists.squid-cache.org
Cc: Kasat, Puneeth Kumar <pkasat at informatica.com>; Boddupalli, Vikram <vboddupalli at informatica.com>; Uppal, Tanjot Singh <tuppal at informatica.com>
Subject: NTLM V2 Set up for Squid issue

Hi Team,

We see the below error while configuring Squid for NTLM V2.

1664469456.486     73 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469461.446     67 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469466.478     96 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469471.497    102 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469476.478     88 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469481.454     46 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html
1664469612.625     34 10.65.140.107 TCP_DENIED/407 4326 CONNECT push.services.mozilla.com:443 - HIER_NONE/- text/html



auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=xxxxx.com
auth_param ntlm children 10
auth_param ntlm keep_alive off


auth_param ntlm program /usr/lib/squid/ntlm_auth xxxx.com/xxxxx.informatica.com
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes


acl ntlm_users proxy_auth REQUIRED
http_access allow ntlm_users
#http_access deny all

NOTE: Our wbinfo component is working as expected.

We made use of https://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm for doc.

Regards,
Bharath

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20220929/f262eb7f/attachment.htm>