On 22/02/2012 5:30 p.m., Jiang Wen Dong wrote:
I have 2 IIS website with Integrated Windows Authentication.
Users access internet and these 2 websites by squid.
Access internet is ok, but can’t access these 2 websites.
I have tied v3.1 and v3.2 with default config, but the problem still there.
It seems squid cut off www-auth information.
Anybody can help me with this?
Is squid operating in forward or reverse proxy mode?
* forward proxy never touch www-auth headers
* reverse proxy are where the auth is destined to be tested. Squid will
attempt to validate them using your configured auth_param.
NP: login using NTLM credentials to a backend is not supported. (what
often appears to be a "relay" is actually Squid logging into the backend
itself).
Is the website on the local LAN or out on the Internet?
* NTLM requires end-to-end connectivity. Many Internet links do not
provide those guarantees since proxy gateways and NAT were invented.
Do you have persistent connections enabled or disabled?
* NTLM requires them.
Amos
