<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#464646" bgcolor="#FFFFFF">
<font face="Arial">Thanks amos !!<br>
<br>
I think auth_schemes can be a workaround.<br>
I will try it !<br>
<br>
<br>
</font><br>
<div class="moz-cite-prefix">Le 21/09/2021 à 02:49, Amos Jeffries a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:72649623-8ebb-08ea-9779-54caba08ab3d@treenet.co.nz">On
21/09/21 11:49 am, David Touzeau wrote:
<br>
<blockquote type="cite">
<br>
When edge, chrome and IE try to establish a session, Squid claim
<br>
<br>
2021/09/21 01:17:27 kid1| ERROR: Negotiate Authentication
validating user. Result: {result=BH, notes={message: received
type 1 NTLM token; }}
<br>
<br>
This let us understanding that these 3 browsers try NTLM instead
of a Basic Authentication.
<br>
<br>
I did not know why these browsers using NTLM as they did not
connected to the Windows domain
<br>
</blockquote>
<br>
Unlike Kerberos, NTLM does not require the machine to be connected
to a domain to have credentials. AFAIK the browser still has
access to the localhost user credentials for use in NTLM. Or the
machine may even be trying to use the Basic auth credentials as LM
tokens with NTLM scheme.
<br>
<br>
<br>
<blockquote type="cite">Why squid never get the Basic
Authentication credentials. ?
<br>
<br>
</blockquote>
<br>
That is a Browser decision. All Squid can do is offer the schemes
it supports and they have to choose which is used.
<br>
<br>
<blockquote type="cite">Did i miss something ?
<br>
</blockquote>
<br>
With Squid-5 you can use the auth_schemes directive to workaround
issues like this.
<br>
<a class="moz-txt-link-rfc2396E" href="http://www.squid-cache.org/Versions/v5/cfgman/auth_schemes.html"><http://www.squid-cache.org/Versions/v5/cfgman/auth_schemes.html></a>
<br>
<br>
<br>
Amos
<br>
_______________________________________________
<br>
squid-users mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<br>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
<br>
</blockquote>
<br>
</body>
</html>