Squid NTLM authentication failing for some users

[Mark Renziehausen]

I am having one strange problem with our new installation of Squid (RHEL4u4, Squid 2.5 STABLE14, going to 2.6ST12 soon, Samba 3.023).

What I have seen are some users randomly begin to get prompted when using NTLM authentication (I'm using Samba's ntlm_auth) from their Windows XP workstations when authenticating thru the proxy server. The prompting is caused by the user is failing the NTLM authenticaion and falling down in the Basic authentication for Squid.

Once it starts, it will not end. The only solution I have found to this problem is deleting the user's local profile and their machine and making them recreate it.

Can Squid's NTLM process somehow cache the request from the client?

Can I turn on some type of logging to see the if or why the NTLM auth attempt is failing?

[Mark Renziehausen]

I found a solution to this. For some reason, IE is storing a password for this connection. I am thinking that it may have something to do with failing the NTLM authentication once. I'm not sure if the user is storing a password themselves, or if IE is doing it.

You have to run the following command from Start...Run

rundll32.exe keymgr.dll, KRShowKeyMgr

It will launch the Stored User Names and Password dialog box. I deleted the entry for that had the DNS entry for my proxy server.