Re: [squid-users] NTLM Authentication Win XP

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sat, 29 Jun 2013 16:54:35 +1200

On 29/06/2013 12:16 p.m., Eric Vanderveer wrote:
> I have an Ubuntu 12.04.2 LTS running DG and Squid I have no problems
> with surfing on Win 7 but XP always prompts for a user and pass and
> will never accept anything I give it. I get this toward the end of the
> negotiation in my cache.log file.
>
> negotiate_wrapper: received type 120 NTLM token
> 2013/06/28 20:15:01| negotiate_wrapper: Return 'NA = NT_STATUS_UNSUCCESSFUL
>
>
> I am out of ideas. Anyone?

Type 120 is weird. NTLM tokens come in type 1 (client request), type 2
(proxy/server challenge) and type 3 (client credentials).

This has been seen before. I suspect that it means your AD backed (or
the client) is using NTLMv2 with encrypted security extensions. That
does not matter to Squid, but may matter to the negotiate_wrapper script
which need to decode the token to decide which helper they go to.

Amos
Received on Sat Jun 29 2013 - 04:54:47 MDT

This archive was generated by hypermail 2.2.0 : Sat Jun 29 2013 - 12:00:17 MDT