Plant, Dean wrote: > nick.apostolou@xxxxxxxxxxxxxx wrote: >> Hi, >> >> Anyone got any suggestions on my authentication prompt problems with >> NTLM authentication? >> >> I've also got a test box which was build with a tar ball of the >> squid and samba directories which authenticates with no problem and >> does not give any errors in the cache.log. >> >> Regards >> Nick Apostolou >> IT Infrastructure | ABN AMRO Bank Australia/NZ >> Ph: +61 2 8259 5330 | Fax: +61 2 8259 5440 | Mobile: + 61 401 709 007 >> email: nick.apostolou@xxxxxxxxxxxxxx > > Try the squid_kerb_auth module. We are running 2.6.x and we have > suffered the same random pop-ups on NTLM, adding Kerberos > authentication to the top of the auth configuration fixes the random > pop-ups on IE 7 and Firefox. IE 6 does not support Kerberos so leave > NTLM in your configuration if you have this browser on site. XP users > will also suffer Kerberos ticket renewal issues if your users leave > their machines on overnight and XP is not patched to SP3. > Just reread over my notes and IE6 *is* supposed to support kerb authentication. We just had issues with it's reliability in testing so left in NTLM to ensure that if kerb_auth failed it could drop back to NTLM.
