[squid-users] Fwd: Problems with NTLM authentication

[Brendan Kearney]

On Tue, 2014-10-07 at 20:50 +0200, Marcel wrote:
> Hello,
> 
> I have some more information.
> 
> The problem seems to have nothing to do with samba, krb5 or anything
> else. I set up a new squid that isn't in the AD and doesn't use any
> kind of authentication at all.
> 
> 
> I have the exact same problem. Here is my POC squid.conf:
> 
> acl localnet src all
> http_access allow all
> http_port 3128
> 
> 
> 
> That is the entire configuration in my tests. As you can see, it is
> absolutely impossible for it to be a configuration issue.
> 
> Why can't I log on to a NTLM protected website with Internet Explorer
> when going over a squid proxy?
> 
> 
> It works fine in Firefox.
> 
> 
> 
> ---------- Forwarded message ----------
> From: foggle <lord.tek at gmail.com>
> Date: 7 October 2014 18:10
> Subject: [squid-users] Problems with NTLM authentication
> To: squid-users at lists.squid-cache.org
> 
> 
> Hello,
> 
> I have set up a squid Proxy that uses samba/ntlm/krb5 to do SSO AD
> authentication in the Company.
> 
> 
> This works fine.
> 
> My problem is that external Websites on the Internet that use NTLM
> authentication of their own do not work. My users enter their Details
> (DOMAIN\user and Password) and receive authentication failures
> Messages.
> 
> Interestingly enough, this (almost) only occurs in Internet Explorer.
> The
> same sites work fine with Firefox.
> 
> Thank you in advance for your much needed help.
> 
> 
> 
> --
> View this message in context:
> http://squid-web-proxy-cache.1019090.n4.nabble.com/Problems-with-NTLM-authentication-tp4667742.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
> 
> 
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users

not something that squid would be affecting, as squid has nothing to do
with the auth to the website.

Tools -> Internet Options -> Advanced tab: scroll down until you
Security.  Under Security, check the "Enable Integrated Windows
Authentication*" check box, and restart your browser.