RE: [squid-users] Popup login and password box with Winbind authe nticators

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sorry about the late reply.
This is what I get from ethereal. It looks like NTLM is being passed
to an extent.

GET http://www.cisco.com/ HTTP/1.0 Accept: */* Accept-Language: en-us
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0;
Q312461; .NET CLR 1.0.3705) Host: www.cisco.com Proxy-Connection:
Keep-Alive HTTP/1.0 407 Proxy Authentication Required Server:
squid/2.5.PRE12 Mime-Version: 1.0 Date: Wed, 25 Sep 2002 16:13:13 GMT
Content-Type: text/html Content-Length: 1259 Expires: Wed, 25 Sep
2002 16:13:13 GMT X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Proxy-Authenticate: Basic realm="CFRS.net Web Connection"
Proxy-Authenticate: NTLM X-Cache: MISS from proxy Proxy-Connection:
close
ERROR
Cache Access Denied

While trying to retrieve the URL: http://www.cisco.com/

The following error was encountered:

* Cache Access Denied.

Sorry, you are not currently allowed to request:

    http://www.cisco.com/

from this cache until you have authenticated yourself.

You need to use Netscape version 2.0 or greater, or Microsoft
Internet Explorer 3.0, or an HTTP/1.1 compliant browser for this to
work. Please contact the cache administrator if you have difficulties
authenticating yourself or change your default password.

> Could this have something to do with the fact that I don't see
> <Domain><Winbindseparator><username> when I do wbinfo -u or -g? I
> don't really have a clue, I'm just thinking out loud.
>
No, that sounds normal.

Fire up ethereal or the like and look at the conversation between
squid and IE.

The first response from squid should be a 407 Proxy Authentication
Required and include a header line like:
Proxy-Authenticate: NTLM

Jerry

A sample conversation for an initial request from one of my test
machines:

IE:
===
GET http://www.cisco.com/ HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
application/vnd.ms-excel, application/vnd.ms-powerpoint,
application/msword, application/pdf, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; AIRF;
.NET CLR 1.0.3705)
Host: www.cisco.com
Proxy-Connection: Keep-Alive

Squid Response:
==============
HTTP/1.0 407 Proxy Authentication Required
Server: Squid/2.5-DEVEL
Mime-Version: 1.0
Date: Tue, 24 Sep 2002 01:27:38 GMT
Content-Type: text/html
Content-Length: 961
Expires: Tue, 24 Sep 2002 01:27:38 GMT
X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="Squid proxy-caching web server"
X-Cache: MISS from bsd.itraktech.com
Proxy-Connection: close

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPZHwJTRI6EQFFv63EQJL3ACg2Md9GgF++/ilSq4/h2fAa3DBmTsAoJnI
aXvK8GcUngPW0R1b56e1eyZa
=Tfee
-----END PGP SIGNATURE-----
Received on Wed Sep 25 2002 - 11:22:13 MDT