[squid-users] Logging failed authentication attempts

[Amos Jeffries]

On 31/01/2023 9:16 pm, Andrey K wrote:
> Hello Amos,
>
> Thank you for the idea to write a wrapper script.
>
> As NTLM-helper returns "NA NT_STATUS_LOGON_FAILURE" during 
> authentication failed,

Oh. Your script should convert that old syntax to the current one:

   ERR token=NT_STATUS_LOGON_FAILURE user="..."

FYI, If it still does not show up you can change the log format to print 
%note{user}

>
> By the way, what are these acronyms for (YR, KK, TT, AF, BH, NA, LD)?

see 
https://wiki.squid-cache.org/Features/NegotiateAuthentication#how-does-it-work-in-squid


HTH
Amos