[squid-users] squid2.5-pre3 Accelerator & IIS 5 NTLM authentication always denies access to IIS site

Guys,

please forget my request, it works. One should think about disabling silly
ntlm authentication.

thanx anyway,

Philipp

> -----Ursprüngliche Nachricht-----
> Von: Philipp Snizek [mailto:mailinglists@belfin.ch]
> Gesendet: Mittwoch, 30. Januar 2002 18:42
> An: squid-users@squid-cache.org
> Betreff: [squid-users] squid2.5-pre3 Accelerator & IIS 5 NTLM
> authentication always denies access to IIS site
>
>
>
> Hi list users
>
> I hope somebody here made the same experience as me and has a
> solution for
> that:
>
>
> Win2k Server & Exchange 2k
> Outlook Web Access
> 10.0.0.10
> |
> |
> 10.0.0.2
> Squid2.5-pre3
> Accelerator
> 192.168.1.3
> |
> |
> 192.168.1.1
> Router
> Public IP
> |
> |
> INET
>
>
> Squid accelerator works fine accelerating normal http sites on IIS 5.
> There's just this problem:
> As soon as IIS 5 wants user authentication for Exchange 2k Outlook Web
> Access, access is always denied. If traffic is normally
> routed (not via
> squid proxy) NT5 authentication works fine and access to
> Outlook Web Access
> is granted. Also, IIS 4 and Exchange 5.5 Outlook Web Access
> via squid 2.5
> pre-3 worked well.
> I sniffed the connection to find out what's wrong with the user
> authentication and found out that win2k uses NTLM for
> authentication which
> is new in win2k. I assume squid has a problem with this kind of
> authentication.
> Does the IIS 5 authentication work with older squid versions
> that don't
> support SSL?
>
> Please give me a hint what I have to change to make the
> authentication work
> over the squid proxy.
>
> Thanx a lot
> Philipp
>
>
Received on Wed Jan 30 2002 - 11:22:11 MST