<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Dear all,</div>
<div> </div>
<div>i'm facing a strange problem using squid 3.5.20 with ntlm transparent authentication.</div>
<div>I cannot use kerberos auth because i need to pass DOMAIN\user to my parent proxy with x-authenticated-user header, and the form USERNAME@DOMAIN is not supported.</div>
<div>Users can surf the web without problems but, sometimes, they receive request credential popup from browser (explorer, edge, mozilla and chrome it does not matter).</div>
<div> </div>
<div>auth_param ntlm program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp</div>
<div>auth_param ntlm children 300 startup=200 idle=10 concurrency=0</div>
<div>auth_param ntlm keep_alive on</div>
<div>auth_param basic program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-basic<br/>
auth_param basic children 25 startup=15 idle=5 concurrency=0<br/>
auth_param basic realm PROXY AUTHORIZATION REQUIRED<br/>
auth_param basic credentialsttl 30 minutes<br/>
authenticate_cache_garbage_interval 1 hours<br/>
authenticate_ttl 30 minutes<br/>
authenticate_ip_ttl 30 minutes</div>
<div> </div>
<div>I migrated from squid 2.6.x and, with similar configuration, the required credentials was displayed only when the password was expired.</div>
<div>In this situation, users must click on abort button many times to restore a good situation, but i cannot understand why the request popup suddenly.</div>
<div>Is this a credentials cache timeout problm (authenticate_ttl 30 minutes)?</div>
<div>Is this a problem in the browser?</div>
<div>Is this a comunication problem with squind and Active Directory?</div>
<div>I would like to undestrand why, so i need advices to start debug and find a solution.</div>
<div>Any help will be much appreciated.</div>
<div> </div>
<div>Best Regards.</div>
<div>Giulius.</div></div></body></html>