I can't remember for sure what happened when I tried the ntlm_auth --helper-protocol=squid-2.5-basic test, but I do know that I've seen 2 things cause a popup authentication window that still fails when proper credentials are entered: 1. Netlogon service not running on AD server (unlikely, but it happened to me recently) 2. You have not provided Squid permission to the winbindd privileged pipe. For the latter, in my case: chown root:squid /var/cache/samba/winbindd_privileged chmod 750 /var/cache/samba/winbindd_privileged did the trick. As soon as I performed this forgotten step, authentication worked. Geoff -----Original Message----- From: Fernando Lujan [mailto:fernando.lujan@xxxxxxxxxxxx] Sent: Friday, January 20, 2006 11:56 AM To: squid-users Subject: ntlm_auth again... :( Hi all, I'm trying to make squid works with my Samba PDC. The command: root@squid~# ntlm_auth --helper-protocol=squid-2.5-basic xxx+root ##### OK But The squid always pop-up for a username password, no matter how many different users/passwords I try. Here is: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 30 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours Thanks in advance. Fernando Lujan
