Re: [squid-users] Squid-Cache-Error with NTLM: "got NTLMSSP command 3, expected 1"

Tom Tux wrote:
> I didn't configured kerberos-helper like squid_kerb_auth. I'm just
> using ntlm_auth. So why do I have this message?
>
If you want to use ntlm_auth ( NTLMv1?) you need to change some
compatibility settings in windows, specially windows vista and 7 are
configure by default to only use NTLMv2 honoring kerberos, you need to
edit windows registry and change/create

*HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LmCompatibilityLevel*

*DWORD value 1

You can automate this with a logon script o with a group policy
Security:LAN Manager Authentication Level

Anyway, I think is time to migrate to kerb_auth.

Best regards.
*
> 2010/6/24 Amos Jeffries <squid3_at_treenet.co.nz>:
>
>> On Wed, 23 Jun 2010 09:28:38 +0200, Tom Tux <tomtux80_at_gmail.com> wrote:
>>
>>> Hi
>>>
>>> A few days ago, I already wrote a post concerning the following
>>> messages in the cache.log (squid 3.1.3):
>>>
>>> [2010/06/23 09:13:46, 1] libsmb/ntlmssp.c:335(ntlmssp_update)
>>> got NTLMSSP command 3, expected 1
>>> [2010/06/23 09:13:46, 1] libsmb/ntlmssp.c:335(ntlmssp_update)
>>> got NTLMSSP command 3, expected 1
>>> [2010/06/23 09:13:46, 1] libsmb/ntlmssp.c:335(ntlmssp_update)
>>> got NTLMSSP command 3, expected 1
>>>
>>>
>>> Our authentication is ntlm-based.
>>>
>> http://markmail.org/message/aumkxcehqmlnuhbu?q=NTLMSSP+command+3+expected+1
>>
>> Amos
>>
>>

-- 
Jorge Armando Medina
Computaci�n Gr�fica de M�xico
Web: http://www.e-compugraf.com
Tel: 55 51 40 72, Ext: 124
Email: jmedina_at_e-compugraf.com
GPG Key: 1024D/28E40632 2007-07-26
GPG Fingerprint: 59E2 0C7C F128 B550 B3A6  D3AF C574 8422 28E4 0632