https://kb.rvmgroup.it/index.php?action=history&feed=atom&title=Autenticazione_NTLM_in_Squid Autenticazione NTLM in Squid - Revision history 2026-05-06T15:52:51Z Revision history for this page on the wiki MediaWiki 1.44.2 https://kb.rvmgroup.it/index.php?title=Autenticazione_NTLM_in_Squid&diff=3661&oldid=prev Gabriele.vivinetto at 17:51, 24 November 2005 2005-11-24T17:51:04Z <p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 17:51, 24 November 2005</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l23">Line 23:</td> <td colspan="2" class="diff-lineno">Line 23:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>acl naiagent browser McAfee AutoUpdate</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>acl naiagent browser McAfee AutoUpdate</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>acl nai dstdomain .nai.com</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>acl nai dstdomain .nai.com</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">acl java_jvm browser Java/1.4</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">acl java_jvm browser Java/1.5</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div># queste direttive definiscono delle acl</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div># queste direttive definiscono delle acl</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>#...</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>#...</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l33">Line 33:</td> <td colspan="2" class="diff-lineno">Line 35:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http_access allow wuagent wu</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http_access allow wuagent wu</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http_access allow naiagent nai</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http_access allow naiagent nai</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div># windowsupdate <del style="font-weight: bold; text-decoration: none;">e </del>l'update di mcafee antivirus possono uscire sena autenticazione (WU non usa ntlm, e nemmeno NAI)</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">http_access allow java_jvm</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div># windowsupdate<ins style="font-weight: bold; text-decoration: none;">, </ins>l'update di mcafee antivirus<ins style="font-weight: bold; text-decoration: none;">, e Java, </ins>possono uscire sena autenticazione (WU non usa ntlm, e nemmeno NAI<ins style="font-weight: bold; text-decoration: none;">, così come il Java, che potrebbe dare un errore di java.lang.nullPointerException</ins>)</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>#...</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>#...</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>#...</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>#...</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l103">Line 103:</td> <td colspan="2" class="diff-lineno">Line 106:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Link Utili ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Link Utili ==</div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Per la gestione dei problemi con Java: [http://www.llg.it/Squid-Book/HTML/sec-squid-25-autenticazione-ntlm.html#SEC-PROB-COMUNI-CON-NTLM  Problemi comuni con NTLM - Java runtime]</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[http://merlino.merlinobbs.net/Squid-Book/HTML/sec-squid-25-autenticazione-ntlm.html NTLM Authentication - Squid Book]</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[http://merlino.merlinobbs.net/Squid-Book/HTML/sec-squid-25-autenticazione-ntlm.html NTLM Authentication - Squid Book]</div></td></tr> </table> Gabriele.vivinetto https://kb.rvmgroup.it/index.php?title=Autenticazione_NTLM_in_Squid&diff=1380&oldid=prev Gabriele.vivinetto at 15:03, 22 September 2005 2005-09-22T15:03:01Z <p></p> <p><b>New page</b></p><div>[[Category: Squid]]<br /> <br /> E&#039; possibile usare l&#039;autenticazione Windows per accedere trasparentemente a Squid, con Internet Explorer senza che venga richiesta la password, e con richiesta di utente e password per altri browser.<br /> <br /> == Configurazione di Squid ==<br /> <br /> Inserire le seguenti direttive in &#039;&#039;/etc/squid.conf&#039;&#039; nelle posizioni indicate dai commenti presenti nel file (leggi: le direttive devono essere nell&#039;ordine indicato, altrimenti squid non parte):<br /> <br /> &lt;pre&gt;<br /> auth_param ntlm program /usr/lib/squid/ntlm_auth DOMINIO/SERVER_PDC DOMINIO/SERVER_BDC<br /> auth_param ntlm children 10 <br /> auth_param ntlm max_challenge_reuses 2 <br /> auth_param ntlm max_challenge_lifetime 15 minutes <br /> auth_param ntlm use_ntlm_negotiate off<br /> # queste direttive configurano l&#039;external authenticator NTLM<br /> #...<br /> #...<br /> acl wuagent browser Windows Update Control<br /> acl wuagent browser Microsoft WU Client/2.0<br /> acl wuagent browser Microsoft BITS/6.6<br /> acl wuagent browser Industry Update Control<br /> acl wu dstdomain .microsoft.com .windowsupdate.com .windows.com .public-trust.com<br /> acl naiagent browser McAfee AutoUpdate<br /> acl nai dstdomain .nai.com<br /> # queste direttive definiscono delle acl<br /> #...<br /> #...<br /> acl Authenticated proxy_auth REQUIRED<br /> acl Lan_1 src 192.168.0.0/255.255.255.0<br /> # queste direttive definiscono che l&#039;autenticazione è obbligatoria e definiscono la lan autorizzata<br /> #...<br /> #...<br /> http_access allow wuagent wu<br /> http_access allow naiagent nai<br /> # windowsupdate e l&#039;update di mcafee antivirus possono uscire sena autenticazione (WU non usa ntlm, e nemmeno NAI)<br /> #...<br /> #...<br /> http_access allow Lan_1 Authenticated<br /> # tutti i client della Lan si devono autenticare<br /> #...<br /> &lt;/pre&gt;<br /> <br /> Verificare che la macchina su cui gira squid risolva il nome SERVER_PDC:<br /> <br /> ping SERVER_PDC<br /> <br /> Se così non fosse, modificare la configurazione DNS o aggiungere la relativa voce in /etc/hosts.<br /> <br /> == Test Configurazione ==<br /> <br /> Riavviare squid<br /> /etc/init.d/squid stop ; /etc/init.d/squid start<br /> <br /> Verificare che non ci siano errori:<br /> <br /> &lt;pre&gt;<br /> tail /var/log/squid/cache.log<br /> <br /> 2005/09/22 16:43:26| Done reading /var/spool/squid swaplog (11254 entries)<br /> 2005/09/22 16:43:26| Finished rebuilding storage from disk.<br /> 2005/09/22 16:43:26| 11254 Entries scanned<br /> 2005/09/22 16:43:26| 0 Invalid entries.<br /> 2005/09/22 16:43:26| 0 With invalid flags.<br /> 2005/09/22 16:43:26| 11254 Objects loaded.<br /> 2005/09/22 16:43:26| 0 Objects expired.<br /> 2005/09/22 16:43:26| 0 Objects cancelled.<br /> 2005/09/22 16:43:26| 0 Duplicate URLs purged.<br /> 2005/09/22 16:43:26| 0 Swapfile clashes avoided.<br /> 2005/09/22 16:43:26| Took 0.5 seconds (22411.0 objects/sec).<br /> 2005/09/22 16:43:26| Beginning Validation Procedure<br /> 2005/09/22 16:43:26| Completed Validation Procedure<br /> 2005/09/22 16:43:26| Validated 11254 Entries<br /> 2005/09/22 16:43:26| store_swap_size = 92156k<br /> 2005/09/22 16:43:27| storeLateRelease: released 0 objects<br /> &lt;/pre&gt;<br /> <br /> E che sia attivo:<br /> <br /> &lt;pre&gt;<br /> pstree -p <br /> ...<br /> ??squid(5286)???squid(5288)???ntlm_auth(5290)<br /> ? ??ntlm_auth(5291)<br /> ? ??ntlm_auth(5292)<br /> ? ??ntlm_auth(5293)<br /> ? ??ntlm_auth(5294)<br /> ? ??ntlm_auth(5295)<br /> ? ??ntlm_auth(5296)<br /> ? ??ntlm_auth(5297)<br /> ? ??ntlm_auth(5298)<br /> ? ??ntlm_auth(5299)<br /> ? ??unlinkd(5300)<br /> ...<br /> &lt;/pre&gt;<br /> <br /> Loggarsi da una macchina windows, autenticandosi nel dominio.<br /> <br /> Impostare il proxy<br /> <br /> Dovrebbe essere possibile navigare immediatamente<br /> <br /> Se invece si prova ad utilizare Mozilla, viene richiesta l&#039;autenticazione. In questo caso inserire username e password del proprio login di rete.<br /> <br /> == Link Utili ==<br /> <br /> [http://merlino.merlinobbs.net/Squid-Book/HTML/sec-squid-25-autenticazione-ntlm.html NTLM Authentication - Squid Book]</div> Gabriele.vivinetto