<div dir="ltr">Hi Rafael,<div> that code was moved to a RegisteredRunner in commit 09490bb867d0b3f00a29911a65c715108e95b782 .</div><div>I'm not sure why it is not working for you; what is the output of 'squid -v' to get configure options?</div><div><br></div><div>Thanks,</div><div> Francesco</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jul 13, 2023 at 1:38 PM Rafael Akchurin <<a href="mailto:rafael.akchurin@diladele.com">rafael.akchurin@diladele.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Good day everyone,<br>
<br>
We are now trying to move the configuration with was valid and working in Squid 5.7 to Squid 6.1 and hitting the following error:<br>
Unknown authentication scheme 'ntlm'<br>
<br>
The problem seem to be with the following configuration we use (output from squid -k parse).<br>
<br>
023/07/13 13:34:04| Processing: auth_param ntlm program /opt/websafety/bin/wsauth --dc1addr=dc1.diladele.lan --dc1port=389<br>
2023/07/13 13:34:04| ERROR: Failure while parsing Config File: Unknown authentication scheme 'ntlm'.<br>
2023/07/13 13:34:04| FATAL: Bungled /opt/websafety/etc/squid/authentication.conf line 231: auth_param ntlm program /opt/websafety/bin/wsauth --dc1addr=dc1.diladele.lan --dc1port=389<br>
2023/07/13 13:34:04| Squid Cache (Version 6.1): Terminated abnormally.<br>
<br>
Comparing the contents of squid-5.9/src/AuthReg.cc and squid-6.1/src/AuthReg.cc it seems the support for NTLM authentication was indeed removed from the codebase (see below).<br>
<br>
May I ask if the NTLM scheme is not needed at all now and we should continue using only Negotiate scheme (letting it handle the NTLM as usual)?<br>
<br>
Best regards,<br>
Rafael Akchurin<br>
Diladele B.V.<br>
<br>
<br>
In 5.0 the AuthReg.cc was<br>
<br>
/**<br>
* Initialize the authentication modules (if any)<br>
* This is required once, before any configuration actions are taken.<br>
*/<br>
void<br>
Auth::Init()<br>
{<br>
debugs(29,DBG_IMPORTANT,"Startup: Initializing Authentication Schemes ...");<br>
#if HAVE_AUTH_MODULE_BASIC<br>
static const char *basic_type = Auth::Basic::Scheme::GetInstance()->type();<br>
debugs(29,DBG_IMPORTANT,"Startup: Initialized Authentication Scheme '" << basic_type << "'");<br>
#endif<br>
#if HAVE_AUTH_MODULE_DIGEST<br>
static const char *digest_type = Auth::Digest::Scheme::GetInstance()->type();<br>
debugs(29,DBG_IMPORTANT,"Startup: Initialized Authentication Scheme '" << digest_type << "'");<br>
#endif<br>
#if HAVE_AUTH_MODULE_NEGOTIATE<br>
static const char *negotiate_type = Auth::Negotiate::Scheme::GetInstance()->type();<br>
debugs(29,DBG_IMPORTANT,"Startup: Initialized Authentication Scheme '" << negotiate_type << "'");<br>
#endif<br>
#if HAVE_AUTH_MODULE_NTLM<br>
static const char *ntlm_type = Auth::Ntlm::Scheme::GetInstance()->type();<br>
debugs(29,DBG_IMPORTANT,"Startup: Initialized Authentication Scheme '" << ntlm_type << "'");<br>
#endif<br>
debugs(29,DBG_IMPORTANT,"Startup: Initialized Authentication.");<br>
}<br>
<br>
<br>
In 6.1 it is now<br>
<br>
<br>
<br>
/**<br>
* Initialize the authentication modules (if any)<br>
* This is required once, before any configuration actions are taken.<br>
*/<br>
void<br>
Auth::Init()<br>
{<br>
debugs(29, 2, "Initializing Authentication Schemes ...");<br>
#if HAVE_AUTH_MODULE_BASIC<br>
static const char *basic_type = Auth::Basic::Scheme::GetInstance()->type();<br>
debugs(29, 2, "Initialized Authentication Scheme '" << basic_type << "'");<br>
#endif<br>
#if HAVE_AUTH_MODULE_DIGEST<br>
static const char *digest_type = Auth::Digest::Scheme::GetInstance()->type();<br>
debugs(29, 2, "Initialized Authentication Scheme '" << digest_type << "'");<br>
#endif<br>
#if HAVE_AUTH_MODULE_NEGOTIATE<br>
static const char *negotiate_type = Auth::Negotiate::Scheme::GetInstance()->type();<br>
debugs(29, 2, "Initialized Authentication Scheme '" << negotiate_type << "'");<br>
#endif<br>
}<br>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br>
<a href="http://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"> Francesco</div>