<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;
mso-believe-normal-left:yes;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><![if mso 9]><style>p.MsoNormal
{margin-left:48.0pt;}
</style><![endif]><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ES-TRAD link="#0563C1" vlink="#954F72" style='margin-left:48.0pt'><div class=WordSection1><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Sorry for my bad english.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>This is the scenario<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I have ubuntu 18.04.01 (with las update) with squid 4.2-2, samba and winbind 4.7.6, AD on Windows Server 2012 R2/2016 with the las update, Client with windows 10 1709 with the las update, firefox 60.2.0esr, google chrome 61.0.3163.79, firefox quantum 62.0 and internet explorer<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I using this guide <a href="https://blog.it-kb.ru/2014/06/16/forward-proxy-squid-3-3-on-ubuntu-server-14-04-lts-part-1-install-os-on-hyper-v-generation-2-vm/">https://blog.it-kb.ru/2014/06/16/forward-proxy-squid-3-3-on-ubuntu-server-14-04-lts-part-1-install-os-on-hyper-v-generation-2-vm/</a></span><span lang=EN-US style='font-family:"Arial",sans-serif;mso-fareast-language:ES-TRAD'> (Only to where kerberos and NTLM are configured)<span style='color:#427D64'><o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I joined the proxy to the active directory<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>All the commands seem to work correctly<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>klist<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Ticket cache: FILE:/tmp/krb5cc_0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Default principal: <a href="mailto:HTTP//srv-squid-krb.mired.lan@MIRED.LAN">HTTP//srv-squid-krb.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Valid starting Expires Service principal<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>09/13/2018 16:29:48 09/14/2018 02:29:48 <a href="mailto:krbtgt/MIRED.LAN@MIRED.LAN">krbtgt/MIRED.LAN@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>09/13/2018 16:55:57 09/14/2018 02:29:48 <a href="mailto:host/srv-squid-krb.mired.lan@MIRED.LAN">host/srv-squid-krb.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>09/13/2018 16:56:13 09/14/2018 02:29:48 <a href="mailto:host/srv-dc.mired.lan@MIRED.LAN">host/srv-dc.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>kinit squidtest<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>password for <a href="mailto:squidtest@MIRED.LAN">squidtest@MIRED.LAN</a>:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I create a proxy.keytab in my windows server 2012 r2 with this command <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>ktpass -princ <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a> -mapuser MIRED\squidtest -pass password -crypto All -ptype KRB5_NT_PRINCIPAL -out d:\proxy.keytab<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>proxy.keytab permission<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>rw-r—r root proxy proxy.keytab<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>My krb5.conf file<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>[libdefaults]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> default_realm = MIRED.LAN<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> dns_lookup_kdc = yes<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> dns_lookup_kdc = no<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> ticket_lifetime = 24h<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> default_keytab_name = /etc/squid/proxy.keytab<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>[realms]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> MIRED.LAN = {<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> kdc = srv-dc.mired.lan<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> admin_server = srv-dc.mired.lan<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> default_domain = mired.lan<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>}<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>[domain_relam]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> mired.lan = MIRED.LAN<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'> .mired.lan = MIRED.LAN<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>klist –k /etc/squid/proxy.keytab<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Keytab name: FILE/etc/squid/proxy.keytab<o:p></o:p></span></p><div style='border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in'><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>KVNO Principal<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>6 <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a></span><span style='font-family:"Arial",sans-serif;mso-fareast-language:ES-TRAD'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>6 <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>6 <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>6 <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>6 <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>wbinfo –authenticate=squidtest%mypassword<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Plaintest password athentication succeded<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Challenge/response password authentication succeded<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>wbinfo –krb5auth=squidtest%mypassword<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Plaintest kerberos password athentication for [squidtest:mypassword] succeded (requesting cctype: FILE) credential were put in; FILE/tmp/krbcc_0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>wbinfo –g (List all groups in AD)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>wbinfo –u (List all users in AD)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>I run this command<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>/usr/lib/squid/negotiate_kerberos_auth_test srv-squid-krb.mired.lan<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Token: YIICSAYGRKw….. blabla /B8VWAxn29WaG/j<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>The squid.conf it’s basic configuration only with <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>auth_program negotiate program /usr/lib/squid/negotiate_wrapper_auth –d –ntlm /usr/bin/ntlm_auth –diagnostics –helper-protocol=2.5-ntlmssp –domain=mired –kerberos /usr/lib/squid/negotiate_kerberos_auth –d –r –s <a href="mailto:HTTP//srv-squid-krb.mired.lan@mired.lan">HTTP//srv-squid-krb.mired.lan@mired.lan</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>auth_program negotiate children 10<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>auth_program negotiate keep_alive off<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>this lines are comment because in cache.log show the folloing messages cache.log<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>username must be specified! <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Usage: [OPTION]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'> --helper-protocol=<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>#auth_param ntlm program /usr/bin/ntlm_auth --diagnostics –helper-protocol=squid-2.5-ntlmssp <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>#auth_param ntlm children 10<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>#auth_param ntlm keep_alive off<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>acl red src 192.168.0.0/24<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>acl auth proxy_auth REQUIRED<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>and <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>http_access allow red auth<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>if I run this commando on console<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>/usr/bin/ntlm_auth –help-protocol=squid-2.5-basic –username=user –password=password<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>NT_STATUS_OK: The operation completed successfully (0x0)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>/usr/bin/ntlm_auth –help-protocol=squid-2.5-ntlmssp –username=user –password=password<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>NT_STATUS_OK: The operation completed successfully (0x0)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>But if I run /usr/bin/ntlm_auth –help-protocol=squid-2.5-ntlmssp<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>The answer is username must be specified<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>But the problem is that Kerberos don’t work. Only NTLM.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>cache.log<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 06:25:02| negotiate_wrapper: Starting version 1.0.1<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 06:25:02| negotiate_wrapper: NTLM command: /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp <o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 06:25:02| negotiate_wrapper: Kerberos command: /usr/lib/squid/negotiate_kerberos_auth -d -r -s <a href="mailto:HTTP/srv-squid-krb.mired.lan@MIRED.LAN">HTTP/srv-squid-krb.mired.lan@MIRED.LAN</a> <o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>negotiate_kerberos_auth.cc(487): pid=10816 :2018/09/14 06:25:02| negotiate_kerberos_auth: INFO: Starting version 3.1.0sq<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>negotiate_kerberos_auth.cc(546): pid=10816 :2018/09/14 06:25:02| negotiate_kerberos_auth: INFO: Setting keytab to /etc/squid/proxy.keytab<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>negotiate_kerberos_auth.cc(570): pid=10816 :2018/09/14 06:25:02| negotiate_kerberos_auth: INFO: Changed keytab to MEMORY:negotiate_kerberos_auth_10816<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'TT TlRMTVNTUAACAAAADgAOADgAAAAVgonigQb5TAh6RigAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIALqX2txRTNQBAAAAAA==<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.197 kid1| 29,4| UserRequest.cc(311) HandleReply: Need to challenge the client with a server token: 'TlRMTVNTUAACAAAADgAOADgAAAAVgonigQb5TAh6RigAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIALqX2txRTNQBAAAAAA=='<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.197 kid1| 29,2| UserRequest.cc(203) authenticate: need to challenge client 'TlRMTVNTUAACAAAADgAOADgAAAAVgonigQb5TAh6RigAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIALqX2txRTNQBAAAAAA=='!<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'TT TlRMTVNTUAACAAAADgAOADgAAAAVgonig5b0rgxfAqwAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAD5e29xRTNQBAAAAAA==<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.202 kid1| 29,4| UserRequest.cc(311) HandleReply: Need to challenge the client with a server token: 'TlRMTVNTUAACAAAADgAOADgAAAAVgonig5b0rgxfAqwAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAD5e29xRTNQBAAAAAA=='<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.202 kid1| 29,2| UserRequest.cc(203) authenticate: need to challenge client 'TlRMTVNTUAACAAAADgAOADgAAAAVgonig5b0rgxfAqwAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAD5e29xRTNQBAAAAAA=='!<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'TT TlRMTVNTUAACAAAADgAOADgAAAAVgoni/IpqOarkGm0AAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAF7Y3NxRTNQBAAAAAA==<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.212 kid1| 29,4| UserRequest.cc(311) HandleReply: Need to challenge the client with a server token: 'TlRMTVNTUAACAAAADgAOADgAAAAVgoni/IpqOarkGm0AAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAF7Y3NxRTNQBAAAAAA=='<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.212 kid1| 29,2| UserRequest.cc(203) authenticate: need to challenge client 'TlRMTVNTUAACAAAADgAOADgAAAAVgoni/IpqOarkGm0AAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAF7Y3NxRTNQBAAAAAA=='!<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'TT TlRMTVNTUAACAAAADgAOADgAAAAVgoniE4M9MFIcoxQAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAIoG3dxRTNQBAAAAAA==<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.213 kid1| 29,4| UserRequest.cc(311) HandleReply: Need to challenge the client with a server token: 'TlRMTVNTUAACAAAADgAOADgAAAAVgoniE4M9MFIcoxQAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAIoG3dxRTNQBAAAAAA=='<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.213 kid1| 29,2| UserRequest.cc(203) authenticate: need to challenge client 'TlRMTVNTUAACAAAADgAOADgAAAAVgoniE4M9MFIcoxQAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAIoG3dxRTNQBAAAAAA=='!<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'TT TlRMTVNTUAACAAAADgAOADgAAAAVgoniyKjYPBGi9DAAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIADpT4NxRTNQBAAAAAA==<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.234 kid1| 29,4| UserRequest.cc(311) HandleReply: Need to challenge the client with a server token: 'TlRMTVNTUAACAAAADgAOADgAAAAVgoniyKjYPBGi9DAAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIADpT4NxRTNQBAAAAAA=='<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.235 kid1| 29,2| UserRequest.cc(203) authenticate: need to challenge client 'TlRMTVNTUAACAAAADgAOADgAAAAVgoniyKjYPBGi9DAAAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIADpT4NxRTNQBAAAAAA=='!<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'KK TlRMTVNTUAADAAAAGAAYAIwAAABIAUgBpAAAAA4ADgBYAAAAEAAQAGYAAAAWABYAdgAAABAAEADsAQAAFYKI4goAqz8AAAAPTClxtLRmctSfR7SLfnA2O0UATABFAEMAQwBBAFYAYwByAHkAcwB0AGEAbABsAEMATABJAC0AUgBFAEQARQBTAC0AMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6IIRx8JJesRgbGAVoQxrwAQEAAAAAAABe2NzcUUzUATZJB+HrulrgAAAAAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIAF7Y3NxRTNQBBgAEAAIAAAAIADAAMAAAAAAAAAAAAAAAADAAANSO8haD472JTKKOF8vBYpu8Z0WdTYbu7c7tqLmb/9ooCgAQAAAAAAAAAAAAAAAAAAAAAAAJACQASABUAFQAUAAvADEANwAyAC4AMQA5AC4AMgAyADQALgA0ADYAAAAAAAAAAAAAAAAAyh1ssj6oWg4B+eQjlqv2aA==' from squid (length: 683).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode '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' (decoded length: 510).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 3 NTLM token<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'AF = crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.297 kid1| 29,4| UserRequest.cc(336) HandleReply: authenticated user crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.297 kid1| 29,4| UserRequest.cc(355) HandleReply: Successfully validated user via Negotiate. Username 'crystall'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.297 kid1| 29,2| User.cc(227) addIp: user 'crystall' has been seen at a new IP address (192.168.0.2:53116)<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'KK 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' from squid (length: 683).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode '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' (decoded length: 510).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 3 NTLM token<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'KK 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' from squid (length: 683).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode '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' (decoded length: 510).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 3 NTLM token<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'KK 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' from squid (length: 683).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode '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' (decoded length: 510).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 3 NTLM token<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'KK 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' from squid (length: 683).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode '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' (decoded length: 510).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 3 NTLM token<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'AF = crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.326 kid1| 29,4| UserRequest.cc(336) HandleReply: authenticated user crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.326 kid1| 29,4| UserRequest.cc(355) HandleReply: Successfully validated user via Negotiate. Username 'crystall'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'AF = crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.331 kid1| 29,4| UserRequest.cc(336) HandleReply: authenticated user crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.331 kid1| 29,4| UserRequest.cc(355) HandleReply: Successfully validated user via Negotiate. Username 'crystall'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'AF = crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.335 kid1| 29,4| UserRequest.cc(336) HandleReply: authenticated user crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.335 kid1| 29,4| UserRequest.cc(355) HandleReply: Successfully validated user via Negotiate. Username 'crystall'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'AF = crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.340 kid1| 29,4| UserRequest.cc(336) HandleReply: authenticated user crystall<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.340 kid1| 29,4| UserRequest.cc(355) HandleReply: Successfully validated user via Negotiate. Username 'crystall'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.340 kid1| ICP is disabled! Cannot send ICP request to peer.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.340 kid1| ICP is disabled! Cannot send ICP request to peer.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.779 kid1| 29,4| UserRequest.cc(294) authenticate: No Proxy-Auth header and no working alternative. Requesting auth header.<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.782 kid1| 29,4| UserRequest.cc(354) authenticate: No connection authentication type<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'YR TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAKAKs/AAAADw==' from squid (length: 59).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode 'TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAKAKs/AAAADw==' (decoded length: 42).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 1 NTLM token<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'TT TlRMTVNTUAACAAAADgAOADgAAAAVgoni6re6l3Xwbr4AAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIANJNNN1RTNQBAAAAAA==<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>'<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.785 kid1| 29,4| UserRequest.cc(311) HandleReply: Need to challenge the client with a server token: 'TlRMTVNTUAACAAAADgAOADgAAAAVgoni6re6l3Xwbr4AAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIANJNNN1RTNQBAAAAAA=='<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18.785 kid1| 29,2| UserRequest.cc(203) authenticate: need to challenge client 'TlRMTVNTUAACAAAADgAOADgAAAAVgoni6re6l3Xwbr4AAAAAAAAAAJwAnABGAAAABgEAAAAAAA9FAEwARQBDAEMAQQBWAAIADgBFAEwARQBDAEMAQQBWAAEAGgBTAFIAVgAtAFMAUQBVAEkARAAtAEsAUgBCAAQAHABlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUAAwA4AHMAcgB2AC0AcwBxAHUAaQBkAC0AawByAGIALgBlAGwAZQBjAGMAYQB2AC4AdQBuAGUALgBjAHUABwAIANJNNN1RTNQBAAAAAA=='!<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Got 'KK 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' from squid (length: 683).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Decode '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' (decoded length: 510).<o:p></o:p></span></p><p class=MsoNormal style='margin-left:48.0pt'><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: received type 3 NTLM token<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>2018/09/14 13:39:18| negotiate_wrapper: Return 'AF = crystall<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>Access.log<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>1536946843.113 66541 192.168.0.2 TCP_TUNNEL/200 3806 CONNECT <a href="http://www.facebook.com:443">www.facebook.com:443</a> crystall FIRSTUP_PARENT/PARENT_PROXY_IP<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>The question is, that only NTLM works, I've tried with Internet Explorer, Google Chrome and Firefox. The other thing is that he never asks for username and password, he uses the user credentials that he initiates session to work (I do not know if this is the correct operation).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-family:"Arial",sans-serif;color:#427D64;mso-fareast-language:ES-TRAD'>What could be happening?</span><span lang=EN-US style='mso-fareast-language:ES-TRAD'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US> Sorry for the long email.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Gretting Yanier<o:p></o:p></span></p></div></body></html>