[squid-users] Fwd: Problems with NTLM authentication

[Marcel]

Hello,

thank you for your input. Unfortunately I have to disagree with you because
of two reasons:

1. That option is already enabled
2. The NTLM authentication works fine in Internet Explorer without Squid.
It only breaks when going through Squid.

I'd be very happy for further suggestions.



On 7 October 2014 21:19, Brendan Kearney <bpk678 at gmail.com> wrote:

> On Tue, 2014-10-07 at 20:50 +0200, Marcel wrote:
> > Hello,
> >
> > I have some more information.
> >
> > The problem seems to have nothing to do with samba, krb5 or anything
> > else. I set up a new squid that isn't in the AD and doesn't use any
> > kind of authentication at all.
> >
> >
> > I have the exact same problem. Here is my POC squid.conf:
> >
> > acl localnet src all
> > http_access allow all
> > http_port 3128
> >
> >
> >
> > That is the entire configuration in my tests. As you can see, it is
> > absolutely impossible for it to be a configuration issue.
> >
> > Why can't I log on to a NTLM protected website with Internet Explorer
> > when going over a squid proxy?
> >
> >
> > It works fine in Firefox.
> >
> >
> >
> > ---------- Forwarded message ----------
> > From: foggle <lord.tek at gmail.com>
> > Date: 7 October 2014 18:10
> > Subject: [squid-users] Problems with NTLM authentication
> > To: squid-users at lists.squid-cache.org
> >
> >
> > Hello,
> >
> > I have set up a squid Proxy that uses samba/ntlm/krb5 to do SSO AD
> > authentication in the Company.
> >
> >
> > This works fine.
> >
> > My problem is that external Websites on the Internet that use NTLM
> > authentication of their own do not work. My users enter their Details
> > (DOMAIN\user and Password) and receive authentication failures
> > Messages.
> >
> > Interestingly enough, this (almost) only occurs in Internet Explorer.
> > The
> > same sites work fine with Firefox.
> >
> > Thank you in advance for your much needed help.
> >
> >
> >
> > --
> > View this message in context:
> >
> http://squid-web-proxy-cache.1019090.n4.nabble.com/Problems-with-NTLM-authentication-tp4667742.html
> > Sent from the Squid - Users mailing list archive at Nabble.com.
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
> >
> >
> >
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
>
> not something that squid would be affecting, as squid has nothing to do
> with the auth to the website.
>
> Tools -> Internet Options -> Advanced tab: scroll down until you
> Security.  Under Security, check the "Enable Integrated Windows
> Authentication*" check box, and restart your browser.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20141007/6945778a/attachment.html>