I decided to move my problem with users getting popup auth windows
randomly while surfing to this new thread title as I think this thread
title is a little more precise. If anyone knows how to resolve the
following I'd greatly appreciate the help.
OS Ver: 6.2-STABLE FreeBSD 6.2-STABLE #1: Thu Mar 15 01:46:50 CDT 2007
Squid Ver: squid-2.6.18 (squid.conf below)
Samba Ver: samba-3.0.28,1
[2008/01/21 10:25:04, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
got NTLMSSP command 1, expected 3
[2008/01/21 10:25:07, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
got NTLMSSP command 1, expected 3
[2008/01/21 10:25:07, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
got NTLMSSP command 1, expected 3
[2008/01/21 10:25:07, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
got NTLMSSP command 1, expected 3
Kind regards,
Elvar
############# squid.conf ################
acl localnets src 10.0.0.0/8
acl listenip src 172.30.1.2/255.255.255.255
http_port 172.30.1.2:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY
acl all src 0.0.0.0/0.0.0.0
cache_dir ufs /usr/local/squid/cache 500 16 256
access_log /usr/local/squid/logs/access.log squid
cache_log /usr/local/squid/logs/cache.log
cache_store_log none
emulate_httpd_log off
log_mime_hdrs on
check_hostnames off
auth_param ntlm keep_alive on
auth_param ntlm program /usr/local/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
--require-membership-of=S-1-5-21-1078081533-562591055-725345543-5170
auth_param ntlm children 100
### Needed for Windows Update to work ###
acl windowsupdate dstdomain .windowsupdate.microsoft.com
acl windowsupdate dstdomain .update.microsoft.com
acl windowsupdate dstdomain .download.windowsupdate.com
acl windowsupdate dstdomain .c.microsoft.com
acl windowsupdate dstdomain .download.microsoft.com
acl honeywell dstdomain .honeywell.com
acl webmail dstdomain webmail.example.com
acl ptsc dstdomain .abcd.k12.in.us
http_access allow windowsupdate localnets
http_access allow honeywell localnets
http_access allow webmail localnets
http_access allow abcd localnets
##########################################
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320
#Recommended minimum configuration:
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl CONNECT method CONNECT
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl AuthorizedUsers proxy_auth REQUIRED
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access allow manager listenip
http_access deny manager
# Deny requests to unknown ports
http_access deny !Safe_ports
# Deny CONNECT to other than SSL ports
http_access deny CONNECT !SSL_ports
#
http_access allow all AuthorizedUsers
# And finally deny all other access to this proxy
http_access deny all
# and finally allow by default
http_reply_access allow all
icp_access allow all
cache_effective_user squid
visible_hostname example.com
logfile_rotate 20
coredump_dir /usr/local/squid/cache
########### End squid.conf ################
