[squid-users] Random auth popup, help needed

From: <[email protected]>
Date: Fri, 8 Oct 2004 12:13:26 -0400

Hello,
I too need some assistance with the "Random NTLM popups" issue.
I have some INTERESTING discoveries here.....
 
First off I run Squid 2.5.STABLE6 and Samba 3.0.6
 
#samba 3.0 version of ntlm_auth
auth_param ntlm program /usr/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 120
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
 
I have 8 squid servers servicing about 4000 users.... we use NTLM for user
identification not really authentication...
Squid runs flawlessly, however I would say about 1 user a day complains that
they get AUTH popups.... 1 out of 4000 isn't so bad.. but everyday it gets
quite annoying...
 
Here is what I have discovered... about 50 percent of our users are on
Windows XP using IE6 and about 50 percent are on Win2k using IE6 ... there
is no direct correlation between OS, however sometimes when the user logs
out and logs back in the problem goes away... and sometimes a reboot fixes
the problem .. .and sometimes we have the user enter in the domain login
information and do a "manual" login.... usually the problem comes back on
the same user more then once, this problem usually picks out a few users and
sticks with them for a while...
Here is the kicker.. if we delete the users windows profile on their local
hard drive (we use local profiles), the user logs back in and they get a new
profile, this fixes the problem....
so it is something in the users profile that causes frequent inability to
authenticate NTLM with samba/squid .... don't know what it is... however if
anyone out there in squid land knows anything???? also any advice to help us
remedy this would be very very very greatly appreciated.
 
Thanks,
M. Mendelsohn
 
Received on Fri Oct 08 2004 - 10:12:07 MDT

This archive was generated by hypermail pre-2.1.9 : Mon Nov 01 2004 - 12:00:01 MST