How to set up Squid to accept NTLM challenge/responce auth
Linux - NewbieThis Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place!
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
How to set up Squid to accept NTLM challenge/responce auth
Hello people!,
To introduce myself, I am an IT consultant specializing in microsoft platforms.
I have a client who uses Clarkconnect as his gateway server and Proxy server using Squid 2.5.The client machines use Windows XP.
The client has a problem accessing my microsoft sharepoint site that uses NTLM authentication.
The site requires a username and password for someone to get access.
The problem we are having is that when you try to access the site behind the Squid firewall you get a 401 access denied error instead of a browser dialog to enter your username and password.
We are testing on both Internet explorer 6 and Firefox.
We have searched the internet for two months now solutions but we have been unlucky.The most documented problem is where the Squid proxy and the NT domain are in the same network and users are outside the network.
Other clients using Microsoft ISA server have no problem accessing and using the site which works perfectly(its an online database-sql server).
My advise is generic. Try to get some error messages, see logs. Don't know about your 'sharepoint', Squid debug level can be increased if you get nothing in default level. Upgrading to 2.6 may help, too.
# Debug information on rules.
# debug_options ALL,1 33,2
# Even more detailed information on rules
# debug_options ALL,1 33,2 28,9
Second... SQUID cannot act as a transparent proxy with NTLM authentication... are the XP machines being authenticated ("single-signed-on") with SQUID? is the 80 port traffic redirected to squid?
Key here is to know the configuration you have, without it it's hard to give any advice.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.