Hi, I have encountered a problem and I don't know how or if I can work around the problem. I setup squid to use NTLM to auth against a 2003 machine. On windows 2003 there is a security option called: "Network Security: LAN Manager authentication level properties", now the default option for this setting is: "Send NTLM response only". If I use the defaults, I can connect fine and users can auth and everything is perfect. The problem comes in when I change that setting to read: "Send NTLMv2 response only\refuse LM & NTLM", then I cant auth anymore, I cant even join the domain anymore. I am running squid version 2.5.stable4 with samba 3.0.10. My configuration looks as follows: I run the following command to join the domain which works if I have the default option enabled, and fails with invalid username or password with the custom setting: # /usr/local/bin/net join -S SERVER -w DOMAIN -U username%password I then run winbindd and nmbd. If the default setting in 2003 is used, I can then view users and groups, but with custom setting it doesn't get this far because the net join fails. My squid config looks like this: auth_param ntlm program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes auth_param ntlm children 2 auth_param basic program /usr/local/libexec/squid/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 2 auth_param basic realm Cache NTLM Authentication auth_param basic credentialsttl 2 hours Anyone got any suggestions? Im totally lost.. Thanks Ian
