I am using Squid 2.5 stable10, Samba3 and winbind with NTLM authentication and wbinfo_group

as external ACLs.

Squid.conf for ntlm authentication:

auth_param ntlm program /usr/local/squid/libexec/ntlm_auth dominio/server
auth_param ntlm children 30
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 15 minutes
auth_param ntlm use_ntlm_negotiate off

Required authentication

acl Authenticated proxy_auth REQUIRED
http_access allow Authenticated


Samba is working perfectly, i can login into domain and query user.
If I open internet explorer 7 with a domain user it works fine, don't prompt for authentication. But If I try to connect with non-domain user, it correctly prompts for password but doesn't recognize it.
In the domain controller log I see: Invalid username/password error.

The strange thing is that it works fine with firefox.

Problems with IE7?

Hello,

It would be a great help if you can provide the cofniguraton options you took for samba and squid.
I have configured but my problem is it prompts me usename and password window.

Thanks in advance.

auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 15
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5

auth_param basic realm Your Realm Here!
auth_param basic credentialsttl 5 hour

acl ntlm_users proxy_auth REQUIRED

http_access allow ntlm_users
http_access deny all

This is my config mayb it will help you!

Little How to: witch worked for me.
http://mkeadle.org/?p=13

Thank you for the reply.