RE: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request

From: Ngo, Toan <tngo@dont-contact.us>
Date: Thu, 20 Apr 2006 11:24:02 -0700

What would be the recommended number the ntlm helper threads for a
company of 300 users?

-----Original Message-----
From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
Sent: Wednesday, April 19, 2006 3:54 AM
To: sanguis@xs4all.nl
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each
request

tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer:

> That's NTLM handshaking, it's normal behaviour. Blame MS for creating
a
> crappy implementation of the authentication mechanism.

Will get better the day we can switch to use Kerberos/SPNEGO
authentication.. but unfortunately not yet sufficiently supported in
any of the involved components (browers, Squid, Samba) to be deployed
seriously..

The Squid side of things is available in Squid-3, or as a patch to 2.5
at devel.squid-cache.org. The Samba side is available in Samba-4, and
the MSIE browser side of things is available in the next Windows
version..

Regards
Henrik
Received on Thu Apr 20 2006 - 12:24:06 MDT

This archive was generated by hypermail pre-2.1.9 : Mon May 01 2006 - 12:00:02 MDT