Re: [squid-users] Linux Squid NTLM Firefox. How can I do a SSO?

From: Kinkie <gkinkie_at_gmail.com>
Date: Fri, 8 Jan 2010 09:39:16 +0100

http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm

On Thu, Jan 7, 2010 at 11:50 PM, torcaz99 <torcaz99_at_hotmail.com> wrote:
>
> OK, and how can I say squid to negotiate NTLM?
>
>
>
> torcaz99 wrote:
>>
>> Hallo:
>>
>>   I'm trying to authenticate my Firefox(Linux)  to Squid (Linux) using
>> NTLM without having to type my domain/user and password.
>>
>>   What I have:
>>     - Win2003 running IIS (Internet Information Server).
>>     - RedHat running Squid 2.6.STABLE14
>>     - Client WinXP with IE and Firefox.
>>     - Clients Ubuntu 8.04 and OpenSuse 11.2 integrated with AD with
>> Likewise (ubuntu) and Samba (Opensuse).
>>
>>   What I've got:
>>
>>   1- IIS on Sever Win2003 and Client Firefox (Ubuntu 8.04 and OpenSuse
>> 11.2):
>>     I can connect to Win2003 and I'm not asked for domain\username and
>> password. NTLM works fine.
>>
>>   2- RedHat with Squid and Client WinXP (Firefox and IE).
>>    I can access a protected URL with authentication and I'm not asked for
>> username and password. NTLM works fine, both Firefox and IE.
>>
>> What I've not got:
>>
>>   3- RedHat with Squid and client Ubuntu-Firefox
>>   When I try to access the same URL protected with authentication (trough
>> squid), I'M ASKED for domain\username and password. If I type it, I'm
>> allowed to access.
>>
>>   What I want is not to be prompted, just extract it from my session, the
>> same if the client were WinXp.
>>
>>   For short:
>>      - IIS: I can use NTLM form Windows and Linux clients and it works
>> fine.
>>      - Squid: I can use NTLM if client is Windows, but I'm asked to type
>> domain\username and  password if client is Ubuntu.
>>
>>
>>   Why do I have to type the domain\username and password if my client is
>> Linux? What`s wrong?
>>
>>    Thanks
>>
>>
>>
>
> --
> View this message in context: http://old.nabble.com/Linux-Squid-NTLM-Firefox.-How-can-I-do-a-SSO--tp27060215p27068465.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
>
>

-- 
    /kinkie
Received on Fri Jan 08 2010 - 08:39:27 MST

This archive was generated by hypermail 2.2.0 : Fri Jan 08 2010 - 12:00:02 MST