I've found failing component. It’s external_acl_type with the %LOGIN parameter. It starts some kind of authentification if it thinks user is not authenticated. And that procedure force IE on XP to open login window. I think theat procedure is different one than in squid_kerb_auth' ACL. How can I help to determine root cause if this issue? > -----Original Message----- > From: Игорь Потапов [mailto:potapoviv@xxxxxxxxxxxxxxxxxxx] > Sent: Tuesday, March 13, 2012 10:44 AM > To: squid-users@xxxxxxxxxxxxxxx > Subject: Login Popups on Windows XP with squid_kerb_auth and external acl > > Hi. > squid is 3.1.19 on FreeBSD 8.2 with MIT kerberos. squid_kerb_auth is in use as the only > auth scheme. Have some external acl to check authorization in mysql db. On machines > running XP SP2 with IE8 (enabled Windows Intergrated Auth) sometimes authentication > windows popup. I think this is happening if some request is denied by external auth > script. If I hit Cancel page loads further. On Windows 7 see no such behavior. > Config is here http://pastebin.com/QyCiha8Q Here is external auth script > http://pastebin.com/LiAmniSz I think IE8 on XP sometimes doesn't send Authorization and > asks for it. Or falls back to NTLM. I've made some workarounds to disable login windows > but on XP they appear. > Can I force IE8 on XP to use only negotiate/Kerberos?
