Thanks - last minute bug found there. (Yes adding a basic program helper
will act as a workaround). I'll post a patch shortly.
Rob
> -----Original Message-----
> From: David Gameau [mailto:David.Gameau@unisa.edu.au]
> Sent: Monday, 8 January 2001 10:54 AM
> To: 'squid-users@ircache.net'
> Subject: [SQU] NTLM & Solaris -- Problem using authenticator [Squid
> 2.5.DEVEL-NTLM]
>
>
> Hiya,
>
> I've fetched (using cvs) the latest build of Squid which
> includes the NTLM
> authentication.
>
> configure: ./configure --enable-auth=ntlm
> --enable-ntlm-auth-modules=NTLMSSP
> --enable-ident-lookups --disable-snmp --disable-cache-digets
> --disable-icmp
> --disable-delay-pools --disable-wccp
>
> However, when I have the following entries in my squid.conf,
> I get warnings.
> [Most other options are at their default setting. No basic
> authenticator
> defined, however.]
>
> auth_param ntlm program <squid_path>/bin/ntlm_auth staff\unistaff2
> auth_param ntlm children 5
> auth_param ntlm max_challenge_reuses 0
> auth_param ntlm max_challenge_lifetime 2 minutes
> ...
> acl ie_test proxy_auth REQUIRED
> http_access allow ie_test
>
> error:
> 2001/01/08 10:18:08| aclParseAclLine: IGNORING: Proxy Auth
> ACL 'acl ie_test
> proxy_auth REQUIRED' because no authentication schemes are
> fully configured.
> 2001/01/08 10:18:08| aclParseAclLine: IGNORING: invalid ACL:
> acl ie_test
> proxy_auth REQUIRED
> 2001/01/08 10:18:08| squid.conf line 1524: http_access allow ie_test
> 2001/01/08 10:18:08| aclParseAclLine: ACL name 'ie_test' not found.
> 2001/01/08 10:18:08| squid.conf line 1524: http_access allow ie_test
> 2001/01/08 10:18:08| aclParseAclLine: Access line contains no
> ACL's, skipping.
>
> Looking at cache.log (and ps), the ntlm authenticators are starting
> successfully.
>
> Any ideas? Do I need to define a basic authenticator too?
> (Even if I'm not
> going to use it?)
>
> Thanks,
> David.
> __
>
> David Gameau
> I.T.S. - Unix Team
> University of South Australia
>
> email: David.Gameau@UniSA.edu.au
> phone: +61 8 302 3533
> fax: +61 8 302 5800
>
> Disclaimer: I didn't do it. Nobody saw me do it. You can't
> prove anything.
>
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>
>
-- To unsubscribe, see http://www.squid-cache.org/mailing-lists.htmlReceived on Sun Jan 07 2001 - 17:27:07 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:57:21 MST