The fact that other browsers are perfectly fine logging in through the proxy should tell you it is a problem with IE. Also for the record please reconsider the use of NTLM on a website. The amount of trouble you are having to go to to get it to operate should be an indication of its (lack of) usefulness. WindowsXP is being end-of-life'd this month and was the last system to support NTLM by default. Amos On 8/04/2014 11:37 p.m., Rietzler, Markus wrote: > What are the problems? > > There are two issues: > > 1) squid doing user auth via ACL 2) squid forwards / passthrough auth > to IIS > > Are there any squid-parent proxies involved? > > > Normally > > http_port 8080 connection-auth=on > > where connection-auth is on per default? That means, that ntlm-auth > is passed through squid. Which samba/winbind version are you using. > For IE10 and up you have to use "newer" versions (i think > 3.6.x) > > > markus > > > -----Ursprüngliche Nachricht----- > Von: Antero Prazeres > > Hello, I need some help with this issue as I am out of ideas and I > don¹t find any similar issues on your lists/emails/faqs. I am using a > server with CentOS6 and Squid 3.1.10 as a proxy. One of my teams > needs to access to ISS 7 trough Squid for test and development > purposes using only NTLM. Squid server is accessing the AD and > credentials are working. All tests performed with Wbinfo are > successful. The access to the IIS ntlm site is successful from > Firefox and Safari, all returning the message ³you are authenticated > using NTLM². I try to perform the same test on several machines with > Windows 7 and Internet Explorer, most of them 11, and don¹t work. GPO > was altered on the windows for NTLM, ISS site is requesting NTLM with > extended protection and kernel=mode authentication off. > > Somebody as any ideas please?? > > Thank you > > Best regards > > Antero Prazeres >
