From: serassio <> Date: Tue, 1 Nov 2005 21:12:52 +0000 (+0000) Subject: Updated documentation for Windows native NTLM helper. X-Git-Tag: SQUID_3_0_PRE4~561 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6f99db7e22b30fd3858c2c432f43454c28642ae1;p=thirdparty%2Fsquid.git Updated documentation for Windows native NTLM helper. --- diff --git a/helpers/ntlm_auth/mswin_sspi/readme.txt b/helpers/ntlm_auth/mswin_sspi/readme.txt index ec0d50c8cd..67d094d7eb 100755 --- a/helpers/ntlm_auth/mswin_sspi/readme.txt +++ b/helpers/ntlm_auth/mswin_sspi/readme.txt @@ -32,26 +32,16 @@ Local Groups, not Domain Local Groups. Better group checking is available with External Acl, see mswin_check_group documentation. -The use of NTLM NEGOTIATE packet allow full NTLM/NTLMv2 support, but -Squid too must be configured to use NTLM NEGOTIATE, see squid.conf. - Squid.conf typical minimal required changes: auth_param ntlm program c:/squid/libexec/mswin_ntlm_auth.exe auth_param ntlm children 5 -auth_param ntlm max_challenge_reuses 0 -auth_param ntlm max_challenge_lifetime 2 minutes -auth_param ntlm use_ntlm_negotiate on acl password proxy_auth REQUIRED http_access allow password http_access deny all -When using "use_ntlm_negotiate on" -max_challenge_reuses and max_challenge_lifetime parameters must be specified -but they are are ignored. - Refer to Squid documentation for more details. Currently Internet Explorer has some problems with ftp:// URLs when handling