On 29/06/2013 12:16 p.m., Eric Vanderveer wrote:
I have an Ubuntu 12.04.2 LTS running DG and Squid I have no problems with surfing on Win 7 but XP always prompts for a user and pass and will never accept anything I give it. I get this toward the end of the negotiation in my cache.log file. negotiate_wrapper: received type 120 NTLM token 2013/06/28 20:15:01| negotiate_wrapper: Return 'NA = NT_STATUS_UNSUCCESSFUL I am out of ideas. Anyone?
Type 120 is weird. NTLM tokens come in type 1 (client request), type 2 (proxy/server challenge) and type 3 (client credentials).
This has been seen before. I suspect that it means your AD backed (or the client) is using NTLMv2 with encrypted security extensions. That does not matter to Squid, but may matter to the negotiate_wrapper script which need to decode the token to decide which helper they go to.
Amos
