That's the way NTLM is supposed to work. It requires 2x 407 DENIED for each new tcp connection. On Wed, Sep 25, 2013 at 7:36 PM, Eric Vanderveer <eric@xxxxxxxxxxxxxxxxxx> wrote: > I see "The reply for POST http://somedomain.com is DENIED because it > matched 'ntlm_auth' but then right after I see the same thing but it > says is ALLOWED. > > On Wed, Sep 25, 2013 at 1:30 PM, Eric Vanderveer > <eric@xxxxxxxxxxxxxxxxxx> wrote: >> Still at a loss on this. If anyone has an idea let me know. >> >> >> On Wed, Sep 25, 2013 at 12:57 PM, Eric Vanderveer >> <eric@xxxxxxxxxxxxxxxxxx> wrote: >>> I am assuming you mean -V and its Version 3.6.3 >>> >>> On Wed, Sep 25, 2013 at 12:56 PM, Kinkie <gkinkie@xxxxxxxxx> wrote: >>>> can you do a ntlm_auth -v? >>>> >>>> On Wed, Sep 25, 2013 at 6:54 PM, Eric Vanderveer >>>> <eric@xxxxxxxxxxxxxxxxxx> wrote: >>>>> I am using /usr/bin/ntlm_auth with squid. >>>>> >>>>> On Wed, Sep 25, 2013 at 12:53 PM, Kinkie <gkinkie@xxxxxxxxx> wrote: >>>>>> so it's kerberos, not ntlm, is it? >>>>>> >>>>>> On Wed, Sep 25, 2013 at 6:52 PM, Eric Vanderveer >>>>>> <eric@xxxxxxxxxxxxxxxxxx> wrote: >>>>>>> I already rejoined to the domain. I checked to make sure and I can >>>>>>> see the certificate when i do a klist. >>>>>>> >>>>>>> On Wed, Sep 25, 2013 at 12:45 PM, Kinkie <gkinkie@xxxxxxxxx> wrote: >>>>>>>> What kind of ntlm auth helper are you using? Samba's? >>>>>>>> >>>>>>>> If so, othe simplest reason I can think of without additional info is >>>>>>>> that your machine account in AD went stale for some reason.. can you >>>>>>>> try rejoining the domain? >>>>>>>> >>>>>>>> On Wed, Sep 25, 2013 at 6:27 PM, Eric Vanderveer >>>>>>>> <eric@xxxxxxxxxxxxxxxxxx> wrote: >>>>>>>>> Hi, >>>>>>>>> I have been running squid, dansguardian and ntlm_authentication for >>>>>>>>> about 2 months now with no problem. This morning it stopped working. >>>>>>>>> I can no longer surf and I get login pop ups on my window clients. On >>>>>>>>> the squid server I can see the domain and its users so I am connected. >>>>>>>>> My cache.log is showing a lot of stuff but most of it is greek to me. >>>>>>>>> Here is a snippet.... >>>>>>>>> >>>>>>>>> http://pastebin.com/YryKkC0J >>>>>>>>> >>>>>>>>> Any ideas? >>>>>>>>> >>>>>>>>> Thanks >>>>>>>>> Eric Vanderveer >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> /kinkie >>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> /kinkie >>>> >>>> >>>> >>>> -- >>>> /kinkie -- /kinkie
