[Gllug] Squid and proxy_auth

[Simon Morris]

Hello,

I have a Squid Server (2.5.6-8) running on Debian and it is setup to
issue NTLM authentication to clients so it can pull usernames from
Active Directory using winbind and store the names in the logs as well
as the IP addresses.

It works well and has been in for a number of months.

Some sites that clients visit require authentication and I think what
is happening is that Squid is sending out the users AD credentials
rather than requesting the alternate name and password from the user.

The squid logs for such a session are like this.


152.146.177.200 - - [28/Sep/2005:14:51:41 +0100] "GET
http://stage.domain.cz/ HTTP/1.0" 407 1815 TCP_DENIED:NONE
152.146.177.200 - - [28/Sep/2005:14:51:41 +0100] "GET
http://stage.domain.cz/ HTTP/1.0" 407 1845 TCP_DENIED:NONE
152.146.177.200 - morriss [28/Sep/2005:14:51:41 +0100] "GET
http://stage.domain.cz/ HTTP/1.0" 401 4326 TCP_MISS:DIRECT

I'm happy to provide whichever part of config files etc if someone has
an idea why this would happen.

Thanks

--
~sm
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug