Re: [squid-users] Another ntlm_auth problem

Hi,

Il 10.50 03/08/2002 Gerard Eviston ha scritto:
>Hello all,
>
>In addition to my ldap_group woes, I'm having trouble with the SMB
>helper on 2.5.PRE10 / AIX 5L. Squid.conf has the usual:

Do You are trying a daily auto-generated release or the July 22 2.5 PRE10 ?
In the July 22 release there is a NTLM endianness problem on Sparc Solaris
fixed on 23 July. The daily auto-generated release should work.

>auth_param ntlm program /usr/local/squid/libexec/ntlm_auth DOMAIN/PDC
>acl passwd proxy_auth REQUIRED
>http_access allow password
>
>Using "ntlm_auth -d DOMAIN/PDC" I get something along the lines of (some
>of this is invented for the sake of example :-)
>
>ntlm authenticator. Got 'YR' from Squid
>obtain_challenge: getting new challenge
>getting challenge from DOMAIN\PDC (attempt no. 1)
>Connecting to server PDC domain DOMAIN
>make_challenge retuned 2000b8c
>Got it
>sending 'TT TlRM.....' to squid
>
>and nothing else. No KK or BH, just silence.
>
>After looking further into it, it seems that the browser is sending a
>reset and dropping the connection instead of proceeding with the
>authentication. I have tested this with IE6 / NT4 and IE 5.01 / W2K, and
>by setting LMCompatibilityLevel to 1 on the client machine, but it just
>wont budge. Intergrated authentication is ticked in the browser.
>
>Using fake_auth everyting is fine.

It seems EXACTLY Sparc Solaris fixed problem.

Please let me to know about.

Regards

Guido

>Could this be an AIX-specific issue (I haven't got another OS to test it
>on). Also I remember mention of an endianness problem a little while
>back but I might be reading too much into this.
>
>Any ideas?
>
>Gerard

-
=======================================================
Serassio Guido
Via Albenga, 11/4 10134 - Torino - ITALY
E-mail: guido.serassio@serassio.it
WWW: http://www.serassio.it
Received on Sat Aug 03 2002 - 03:19:02 MDT