Re: [squid-users] NTLM authentication parsing problem

From: Serassio Guido <guido.serassio@dont-contact.us>
Date: Mon, 16 May 2005 13:44:50 +0200

Hi,

At 13.23 16/05/2005, Ytzhak Levy wrote:

>Hello,
>
>Im using squid 2.5-STABLE9 and im trying to use ntlm auth, but when i do a
>squid-k parse it returns following message:
>
>Parsing Config File: Unknown authentication scheme 'ntlm'
>
>my squid.conf:
>
>auth_param ntlm program /usr/local/bin/ntlm_auth
>--helper-protocol=squid-2.5-ntlmssp
>auth_param ntlm children 5
>auth_param ntlm max_challenge_reuses 0
>auth_param ntlm max_challenge_lifetime 2 minutes
>
>compiled options :
>--enable-ssl --enable-default-err-language=Portuguese
>--enable-external-acl-helpers=ldap_group --enable-basic-auth-helpers=SMB
>--enable-ntlm-auth-helpers=ntlm_auth --enable-ntlm-auth-helpers=winbind
>--enable-snmp --enable-delay-pools --enable-carp
>
>
>I think that my squid.conf is correct. Where is the problem ?

By default only basic authentication schema is build, you must use :

--enable-auth="basic ntlm"

What ntlm backend do you want to use ?

For Samba 2 you need:
--enable-basic-auth-helpers=winbind --enable-ntlm-auth-helpers=winbind
--enable-external-acl-helpers=winbind_group

For Samba 3 you need only --enable-external-acl-helpers=wbinfo_group and
ntlm_auth provided with Samba 3 must be used.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Mon May 16 2005 - 05:45:09 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:02 MDT