Re: [squid-users] squid ntlm/basic authentication

On Tuesday 19 August 2003 08.02, jonathan soong wrote:

> I was wondering, in general, do proxies always support Basic, and
> sometimes support NTLM?

Basic is part of the HTTP standard and is usually supported by all
HTTP related software.

NTLM is a Microsoft invention, violating important aspects of the HTTP
standard in the process.. (as expected given their track record of
actually reading RFCs while implementing new features..). Because of
the violations to HTTP the NTLM authentication scheme can not be
proxied by HTTP compliant proxies.

> Or can you get pure NTLM-only proxies?

Most proxies supporting NTLM authentication can be configured to use
NTLM authenticaiton only. This will however completely lock your
users to using Microsoft browsers only and only on Microsoft OS:es
and (well.. this said, some other browsers start to implement
rudimentatry support for NTLM to interoperate with broken servers
only supporting NTLM). And forget about trying to use another Java
engine than the Microsoft "looks like Java" engine..

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com