+ Post New Thread
Results 1 to 3 of 3
Internet Related/Filtering/Firewall Thread, Transparent NTLM authentication - Advice in Technical; Our LA has just changed from using ISA 2000 to ISA 2006 to supply our Websence filtered Internet. I (and ...
  1. #1
    pooley's Avatar
    Join Date
    Sep 2005
    Location
    S Wales
    Posts
    1,166
    Thank Post
    83
    Thanked 130 Times in 107 Posts
    Rep Power
    69

    Transparent NTLM authentication - Advice

    Our LA has just changed from using ISA 2000 to ISA 2006 to supply our Websence filtered Internet.

    I (and many other schools in our LA) have been using Python and NTLMaps (setup locally) so he children?staff do not have to enter a username and passsword to get onto the web.

    Problem is that ISA 06 and Ntlmaps do not want to play ball, have tried various versions of Python and Ntlmaps, played with the settings etc but it just wint work correctly. I.e. it will allow you to get to bbc.co.uk but click on a link and it just stalls. (logs give 407 errors)

    Anyways i'm looking for a proxy authentication replacement, I know I can attempt to install and configue ubuntu and squid, but is there anything else I could be using, I dont need the web filtering/cachine abilities of squid/dansguardian I just want an easy life and not to try to confuse staff with yet another Username and password to remember.

    Any idea's?

    Si

  2. #2

    Join Date
    Jan 2009
    Location
    Bridgend, Wales
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi Si,
    I'm currently trialing both Squid & Tinyproxy in OVPS - as oddly enough, I'm hit with the same issue as you

    Currently have Squid running ok, just https requests are proving problematic.
    Working on getting squid up & running as a priority (along with the caching) on both windows & linux platforms.
    Tinyproxy however, requires as postix platform, so not putting as much effort into that due to most sites not having the capability to run it.

    As soon as I have a soloution, I'll let you know. Conversely, if you come up with anything....

  3. #3


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,485
    Thank Post
    867
    Thanked 854 Times in 675 Posts
    Rep Power
    197
    NTLM-v1 vs NTLM-v2 problem, perhaps? Looks like APS does not support NTLM v2. Squid may be able to upstream-auth as NTLM v2. I'll ask a squid expert.

    Edit: or, if your LEA are kind, they may be able to make the websence box use v1. Think it is a registry fudge, but I am wandering out of kansas here, as far as my knowledge of websense/ISA goes

SHARE:
+ Post New Thread

Similar Threads

  1. Moodle - NTLM Authentication Clarification
    By FN-GM in forum Virtual Learning Platforms
    Replies: 13
    Last Post: 28th July 2009, 03:11 PM
  2. Smoothwall - Mac's NTLM Authentication
    By linkazoid in forum Mac
    Replies: 7
    Last Post: 20th May 2009, 09:54 AM
  3. Transparent authentication on subdomains
    By powdarrmonkey in forum Web Development
    Replies: 0
    Last Post: 4th February 2008, 03:28 PM
  4. Replies: 6
    Last Post: 27th February 2007, 08:00 PM
  5. MRBS + NTLM Authentication
    By Frazer in forum *nix
    Replies: 13
    Last Post: 29th June 2006, 02:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •