How to set up Squid to accept NTLM challenge/responce auth
 

Hello people!,

To introduce myself, I am an IT consultant specializing in microsoft platforms.

I have a client who uses Clarkconnect as his gateway server and Proxy server using Squid 2.5.The client machines use Windows XP.

The client has a problem accessing my microsoft sharepoint site that uses NTLM authentication.
The site requires a username and password for someone to get access.
The problem we are having is that when you try to access the site behind the Squid firewall you get a 401 access denied error instead of a browser dialog to enter your username and password.
We are testing on both Internet explorer 6 and Firefox.

We have searched the internet for two months now solutions but we have been unlucky.The most documented problem is where the Squid proxy and the NT domain are in the same network and users are outside the network.

Other clients using Microsoft ISA server have no problem accessing and using the site which works perfectly(its an online database-sql server).

I will appreciate your help.

Regards,
Norman.

Welcome to LQ!

My advise is generic. Try to get some error messages, see logs. Don't know about your 'sharepoint', Squid debug level can be increased if you get nothing in default level. Upgrading to 2.6 may help, too.

Your best friends ... uncomment the one you need.

# Debug information on rules.
# debug_options ALL,1 33,2

# Even more detailed information on rules
# debug_options ALL,1 33,2 28,9

Second... SQUID cannot act as a transparent proxy with NTLM authentication... are the XP machines being authenticated ("single-signed-on") with SQUID? is the 80 port traffic redirected to squid?

Key here is to know the configuration you have, without it it's hard to give any advice.

Gabriel