On Wed, Feb 24, 2010 at 11:38 AM, Luis Daniel Lucio Quiroz <luis.daniel.lucio@xxxxxxxxx> wrote: > Le Mercredi 24 Février 2010 10:22:14, Dexter Morgan a écrit : >> |------------ START CONFIG -----------| >> >> auth_param ntlm program /usr/bin/ntlm_auth >> --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5 >> #auth_param ntlm max_challenge_reuses 0 >> #auth_param ntlm max_challenge_lifetime 2 minutes >> >> auth_param basic program /usr/bin/ntlm_auth >> --helper-protocol=squid-2.5-basic auth_param basic children 5 >> auth_param basic realm Squid proxy-caching web server >> auth_param basic credentialsttl 5 hours >> >> acl NTLMUsers proxy_auth REQUIRED >> http_access allow all NTLMUsers >> >> |----------- END CONFIG ----------------| >> >> Squid Version 3.0.STABLE19 >> Samba 3.4 >> >> I rececently upgraded from Debian stable to Debian testing and it >> seems it upgraded my squid version. The above config used to work in >> this manner. If a computer was on our domain, ntlm would work. If not, >> it would drop down to the second section and use basic authentication >> and prompt them through their browser. What it's doing now is >> prompting them twice. The second time is prompting for the basic >> authentication and working. How can I get rid of it from prompting >> them through their browser the first time? Is it prompting for ntlm >> auth through their browser? I'm really confused why it changed its >> behavior like this. > > try to resign your server into domain We tried this and it did not work. Is this an issue with the ntlm_auth program maybe? Perhaps the functionality of the program changed?