I am trying to get Squid and NTLM working together. I've looked at several guides, and the same thing happens with all of them. Whenever I try to access a page (using IE6 - should support NTLM), I get a dialog box asking for my username and password - which if provided authenticates me and I can browse the site. I've used ethereal to capture the conversation and noticed that there isn't an NTLM authenticate header as seen below: HTTP/1.0 407 Proxy Authentication Required Server: squid/2.5.STABLE12 Mime-Version: 1.0 Date: Tue, 01 May 2007 01:10:37 GMT Content-Type: text/html Content-Length: 1322 Expires: Tue, 01 May 2007 01:10:37 GMT X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Proxy-Authenticate: Basic realm="Squid proxy-caching web server" X-Cache: MISS from proxy.domain.local X-Cache-Lookup: NONE from proxy.domain.local:3128 Proxy-Connection: close Here are the contents of my squid.conf file (minus all the comments and blank space) - which according to the guides I've seen should be enough to do NTLM. hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY hosts_file /etc/hosts auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 10 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours refresh_pattern ^ftp: 1440 20% 10080 refresh_pattern ^gopher: 1440 0% 1440 refresh_pattern . 0 20% 4320 acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl lcl src 192.168.0.0/16 acl SSL_ports port 443 # 563 # https, snews acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 # 563 # https, snews acl NTAuth proxy_auth REQUIRED http_access allow lcl NTAuth http_access allow localhost http_access deny all http_reply_access allow all icp_access allow all http_port 127.0.0.1:3128 http_port 192.168.1.241:3128 cache_mgr mjvipond@xxxxxxxxx httpd_accel_port 80 httpd_accel_single_host off httpd_accel_with_proxy on httpd_accel_uses_host_header on coredump_dir /var/spool/squid visible_hostname proxy.domain.local httpd_accel_host virtual Thanks -Mike
