[KLUG Members] Squid users cannot login to a Win2003 IIS server?

[Adam Tauno Williams]

> > > We just started to have a problem when trying to log into a remote
> > > Win2003 IIS web server while going though a squid proxy server.
> > You need to direct connect.  We have lots of these;  these IDIOTS are using
> > NTLM authentication which cannot be proxied.  They are IDIOTS;  it is
> > explicitly stated *NOT* to use NTLM authentication across the Internet but 
> > Disciples of MCSE are just way to *@&$*^@*(&^(@ $^*&@&*($ *&^@&*^*$& 
> > ***STUPID** back-births to read there own documentation.
> > You need to open up the firewall to allow outbound connections to their
> > servers and use proxy auto-config to make exceptions for these sites.
> > This is very common with IIS sites configured by MORONS.
> Since I'm in contact with this particular moron, how can I explain to
> him how to configure his IIS server correctly?  I've never configured an
> IIS server, so I don't know where to start.

It was on a configuration panel somewhere when I saw it;  you could select the
default authentication between basic, digest, ntlm, and spa(?, I don't remember
what the last one was).
 
> I already pointed him to http://support.microsoft.com/kb/q198116/ which
> says that these connections cannot be proxies, by _any_ proxy server.
> He came back with "that page is talking about Win2000, not Win2003" so
> it doesn't apply.  Plus that page is a couple years old ...

Yep, he is a moron.

It was true "a couple years" ago, and is true [SHOCK!] now.

> BTW, he also claims that his server is running a stock "out of the box"
> configuration, and works from other locations running M$ proxy servers.

Yes, he is running it out of the box;  I'm quite certain NTLM is the default as
it is very nice for intranets.  Since he is out-of-the-box perhaps you could
supply the IP and we'll take a couple of minutes and hack it into little bits?
:)