Resent-Date: Wed, 25 Oct 2000 03:39:06 -0700 (PDT)
Message-ID: <01f201c03e70$6ed647d0$f7c723cb@lifelesswks>
From: "Robert Collins" <robert.collins@itdomain.com.au>
To: "Dr. Michael Weller" <eowmob@exp-math.uni-essen.de>
Cc: <squid-users@ircache.net>
References: <Pine.A32.3.95.1001025114951.61270A-100000@werner.exp-math.uni-essen.de>
Subject: Re: [SQU] Paging Robert Collins
Date: Wed, 25 Oct 2000 21:43:36 +1100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Resent-Message-ID: <"F9hYjB.A.QH.Khr95"@ack.ircache.net>
Resent-From: squid-users@ircache.net
Precedence: list
Resent-Sender: squid-users-request@ircache.net

For now the debugging options already done will be fine. Thanks Michael,
Rob
----- Original Message -----
From: "Dr. Michael Weller" <eowmob@exp-math.uni-essen.de>
To: "Robert Collins" <robert.collins@itdomain.com.au>
Cc: <squid-users@ircache.net>
Sent: Wednesday, October 25, 2000 9:11 PM
Subject: Re: [SQU] Paging Robert Collins


> On Wed, 25 Oct 2000, Robert Collins wrote:
>
> > Sorry for the lack of response... I have been thinking however...
> >
> > One of your errors - the SetUpX errir is from your DC, yes.
> >     the problem is getting the DC to reuse the challenge issued before
the
> > comms error. Kinkie is looking into this with Thomas Goebel who has a
> > similar, more reproducible problem. (Check the list for a patch to
> > nrtlm/auth/modules/NTLMSSP.)
>
> OK will have a look.
>
> > IE should always start under your windows domain credentials. If it
starts
> > under a local machine account the NTLMSSP will never be able to
authenticate
> > the user as there will be no DC <- local machine trust account
>
> While you are in generally true that IE should always start under your
> windows domain credentials, it is still possible to start IE under a local
> machine account. Noticing squid does not accept these, IE will then prompt
> for a domain account to be used. If you enter a valid account, domain
> password triple here, it DOES work. (this is useful if people dial into
> the net with a ras server from home and want to use the proxy).
>
> > housekeeping as a potential issue? Could be - Kinkie do you want to
stick
> > your oar in here?
> >  (Kinkie has done all the helper programming to date..)
>
> I now have a second installation which shows the same 'sporadic' &
> annoying authentication requests but where I can easier restart squid with
> different options and apply patches.
>
> It seems frequency of these prompts depends somehow on the amount of
> stress to squid and/or the DC. Even more, however, it seems to occur if
> the internet (or whatever is behind squid) is slow!!
>
> Could it be an odd timing issue? Like squid doing the authentication
> handshake too slow and IE times out and gives the authentication prompt?
>
> Is there anything else I can do to help you? Enable specific debugging
> options? I'll try with the ones you sent me already for the time being.
>
> Michael.
>
> --
>
> Michael Weller: eowmob@exp-math.uni-essen.de,
eowmob@ms.exp-math.uni-essen.de,
> or even mat42b@spi.power.uni-essen.de. If you encounter an eowmob account
on
> any machine in the net, it's very likely it's me.
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>
>

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html