NTLM V2 Set up for Squid issue

["K R, Bharath" <krb@xxxxxxxxxxxxxxx>]

From: K R, Bharath
Sent: Thursday, September 29, 2022 10:31 PM
To: squid-users@xxxxxxxxxxxxxxxxxxxxx
Cc: Kasat, Puneeth Kumar <pkasat@xxxxxxxxxxxxxxx>; Boddupalli, Vikram <vboddupalli@xxxxxxxxxxxxxxx>; Uppal, Tanjot Singh <tuppal@xxxxxxxxxxxxxxx>
Subject: NTLM V2 Set up for Squid issue

 

Hi Team,

 

We see the below error while configuring Squid for NTLM V2.

 

1664469456.486     73 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html

1664469461.446     67 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html

1664469466.478     96 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html

1664469471.497    102 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html

1664469476.478     88 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html

1664469481.454     46 10.65.140.107 TCP_DENIED/407 4408 GET http://detectportal.firefox.com/canonical.html - HIER_NONE/- text/html

1664469612.625     34 10.65.140.107 TCP_DENIED/407 4326 CONNECT push.services.mozilla.com:443 - HIER_NONE/- text/html

 

 

 

auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --domain=xxxxx.com

auth_param ntlm children 10

auth_param ntlm keep_alive off

 

 

auth_param ntlm program /usr/lib/squid/ntlm_auth xxxx.com/xxxxx.informatica.com

auth_param ntlm children 5

auth_param ntlm max_challenge_reuses 0

auth_param ntlm max_challenge_lifetime 2 minutes

 

 

acl ntlm_users proxy_auth REQUIRED

http_access allow ntlm_users

#http_access deny all

 

NOTE: Our wbinfo component is working as expected.

 

We made use of https://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm for doc.

 

Regards,

Bharath

 

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users