Hello All, I Have the following problem: All NTLM authentication is working, the samba is working, and the krb5 (I am using ads). - (not the problem, yet) Examples: access.log with username ok (if I remove de deny acl, work without problems) [root@maggie squid]# tail /var/log/squid/access.log 1265260503.633 0 172.21.1.10 TCP_DENIED/407 2721 GET http://www.google.com.br/firefox? - NONE/- text/html 1265260503.645 2 172.21.1.10 TCP_DENIED/407 3011 GET http://www.google.com.br/firefox? leo NONE/- text/html 1265260507.608 1 172.21.1.10 TCP_DENIED/407 3012 GET http://www.google.com.br/firefox? - NONE/- text/html 1265260507.614 3 172.21.1.10 TCP_DENIED/407 3003 GET http://www.google.com.br/firefox? leo NONE/- text/html 1265260789.788 2 172.21.1.10 TCP_DENIED/407 3002 GET http://pt-br.fxfeeds.mozilla.com/pt-BR/firefox/headlines.xml - NONE/- text/html 1265260791.388 1598 172.21.1.10 TCP_MISS/302 646 GET http://pt-br.fxfeeds.mozilla.com/pt-BR/firefox/headlines.xml leo DIRECT/63.245.209.93 text/html 1265260791.390 0 172.21.1.10 TCP_DENIED/407 2346 GET http://www.estadao.com.br/rss/ultimas.xml? - NONE/- text/html kerberos is ok: [root@maggie squid]# kinit leo Password for leo@xxxxxxxxxxxxxxx [root@maggie squid]# wbinfo: [root@maggie squid]# wbinfo -t checking the trust secret via RPC calls succeeded [root@maggie squid]# wbinfo -u and -g get all users and groups. My question is: When I create a rule like this auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp acl proxy_auth leo leo deny_info ERR_ACCESS_DENIED leo http_access deny leo What happens, rather than show the access denied page, is asking user and password (as basic mode, instead of NTLM), but I want to be shown to Access Denied page (ERR_ACCESS_DENIED)! I'm using Squid 3 with CentOS 5.4 (but I had the same problem with ubuntu server 8.04 and squid 2.6) [root@maggie usr]# rpm -qa | grep squid squid-3.0.STABLE20-1.el5 [root@maggie usr]# Thanks! -- Leonardo Dantas Natal - RN, Brasil. Tel: +55 84 8865-7200 ICQ UIN 15073476 lodantas@xxxxxxxxx (MSN Messenger) twitter: ldoliveira, skype lodantas007 http://www.linkedin.com/in/ldantas/
