mirror of
https://github.com/3proxy/3proxy.git
synced 2026-11-07 02:05:49 +08:00
NTLM authentication of proxy clients was gone but for what was left of it: the 407 answer offering NTLM before Basic (12, under NOCRYPT, which nothing else used) and the one for its handshake (13), sent by nothing, and the prototypes of genchallenge() and mschap(), defined nowhere. The strings after them in proxy_stringtable move up two: 403 with <pre> is 12, 503 13, 401 of the FTP server 14, 100 Continue 15. rus.3ps, StringsPlugin's translation, follows: the two strings go, the 403 with <pre> is UTF-8 as the rest, the XML of the running services has its Content-disposition, and the table of counters the columns of its rows (Action and #/Description were one). NT: passwords, MD4 hashes as Windows keeps them, stay. The documents no longer tell to give proxy -n to turn off NTLM. Plugin binary compatibility: a plugin indexing proxy_stringtable finds the strings from 12 on two places earlier, and a .3ps file of its own with the NTLM strings has two more than 3proxy (StringsPlugin warns). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
32 lines
1.4 KiB
HTML
32 lines
1.4 KiB
HTML
|
|
<h3>3proxy Windows Authentication Plugin</h3>
|
|
Support for cleartext authentication against a Windows domain or local Windows account.
|
|
<h4>Usage:</h4>
|
|
<ol>
|
|
<li>Extract WindowsAuthentication.dll to the same folder as the 3proxy executable.
|
|
<li>Create 3ProxyAllowedGroup - a Windows system group allowed to use the proxy.
|
|
You can choose a different group name. The group can be either local or
|
|
Active Directory. Every account allowed to use 3proxy must be included in this
|
|
group either directly or through group nesting.
|
|
<li>Configure the plugin with the 'plugin' command in 3proxy.cfg, e.g.:
|
|
<pre><code>
|
|
plugin "WindowsAuthentication.dll" WindowsAuthentication "3ProxyAllowedGroup"
|
|
</code></pre>
|
|
<br>WindowsAuthentication.dll - location of the DLL; if the DLL is located in a different folder
|
|
from 3proxy.exe, you must specify the complete path to the DLL here. 3ProxyAllowedGroup - the Windows
|
|
system group allowed to use 3proxy.
|
|
After the plugin is loaded, the 'windows' authentication type is supported.
|
|
|
|
<li>Configure 'auth windows' for services that require Windows authentication.
|
|
<li>It is recommended that you also configure authentication caching (see 'authcache')
|
|
to prevent excessive workload on the domain controller. Example:
|
|
<pre>
|
|
authcache user,pass 900
|
|
auth cache windows
|
|
</pre>
|
|
|
|
</ol>
|
|
<h4>Download:</h4>
|
|
<ul>
|
|
<li>Plugin is included in the 3proxy 0.6 binary and source distribution
|
|
</li></ul> |