[squid-users] Squid with NTLM auth behind netscaler

[Amos Jeffries]

On 11/01/2016 9:34 p.m., Fabio Bucci wrote:
> Hi,
> could you help me in looking for what it's wrong?
> 

The client / browser thinks the credentials are wrong for some reason.

You need to run through all the troubleshooting checks to see if any
reason shows up. The recent posts "kerberos authentication with a
machine account doesn't work" might help there.

Amos


> Regar,ds
> Fabio
> 
> 2016-01-07 14:26 GMT+01:00 Fabio Bucci:
>> Hi Amos,
>> just configured squid.conf as:
>>
>> auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth
>> -d -s HTTP/myproxy.domain
>> auth_param negotiate children 100
>> auth_param negotiate keep_alive on
>>
>> acl auth proxy_auth REQUIRED
>>
>> http_access allow auth
>>
>> but it doesn't work and browser requires me credentials popup and even
>> if i put them it asks me again
>>
>> Thanks,
>> Fabio
>>
>> 2015-12-31 6:30 GMT+01:00 Amos Jeffries:
>>> On 2015-12-31 03:42, Fabio Bucci wrote:
>>>>
>>>> Could you help me in kerberos configuration only? I don't want a fallback
>>>
>>>
>>> That should be blindingly obvious ... just use the Kerberos helper directly
>>> as the auth_param helper. Omit the negotiate_wrapper helper and ntlm_auth
>>> helper parts.
>>>
>>> Amos
>>>
>>>
>>> _______________________________________________
>>> squid-users mailing list
>>> squid-users at lists.squid-cache.org
>>> http://lists.squid-cache.org/listinfo/squid-users