On 10/03/2017 5:19 a.m., S V Hareesh wrote: > On top of the conf file from default setup on Windows, I added the following line in the conf. I added the dns servers and allowed localhost. > > cache_peer <corporate_proxy> parent 80 0 default connection-auth=on proxy-only > > never_direct allow all > > When I point my browser to this proxy, it gives me 407, auth required. > > Also, configured squid service on windows to run with a service account that has access to Internet/corp proxy. Squid cannot authenticate to a cache_peer using NTLM. It can only do Nagotiate/Kerberos to the parent proxy, and only when "login=NEGOTIATE" is added (with or without a named keytab file). NOTE: 'connection-auth=on' is about allowing the browser to use NTLM or Negotiate/Kerberos through the cache_peer. It needs to also have "login=PASSTHRU" if that peer is a proxy (as opposed to a web or Exchange server). See the 'AUTHENTICATION OPTIONS' section of <http://www.squid-cache.org/Doc/config/cache_peer/> Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
