RE: [squid-users] security issue regarding authentication

Hi all,

Any ideas to be able to resolve this are very welcome! I have it on all of
my proxies. I have a real security issue with squid configured with
smb_auth. A user not granted access and therefor not listed in any NT group
is able to have access to the internet. I checked and there are no
permissions for guest logons on NT.

         [root@TNLLXS01 /root]#
        /opt/squid/libexec/squid/smb_auth -W KONE.COM -d
         tnltest5 0ngewoon
         Domain name: OURDOMAIN
         Pass-through authentication: no
         Query address options:
         Domain controller IP address: 138.249.140.39
         Domain controller NETBIOS name: XXXNTS1
         Contents of //XXXNTS1/NETLOGON/proxyauth: allow
         OK
 
Does anyone know how this is possible or what actually is wrong?
 
BR,
./koen
 
Received on Thu Dec 20 2001 - 03:24:33 MST