O Squid tem que ser o SQUID 2.7 STABLE8, e as seguintes policies tem que ser alterada.
Computer Configuration \ Windows Settings \ Security Settings \ Local Policies \ Security Options
Domain member: Digitally encrypt or sign secure channel data (always) – DISABLED
Domain member: Digitally encrypt secure channel data (when possible) – DISABLED
Domain member: Digitally sign secure channel data (when possible) – DISABLED
Domain member: Require strong (Windows 2000 or later) session key – DISABLED
Microsoft network client: Digitally sign communications (always) – DISABLED
Microsoft network client: Digitally sign communications (if server agrees) – DISABLED
Microsoft network server: Digitally sign communications (always) – DISABLED
Microsoft network server: Digitally sign communications (if client agrees) – DISABLED
Network security: LAN Manager authentication level - Send LM & NTLM - use NTLMv2 if negotiated
"The problem is the autentificación NTLM of Windows7. It is necessary to create the following key in the registry to solve it (I'm using
Squid Version 3.0.STABLE8 in Debian Lenny):
1. In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
If it doesn’t exist, create a DWORD value named LmCompatibilityLevel and set the value to 1 to use LM NTLM and NTLMv2 if is negociated, this is
Also it works establishing the value to 0, and 3 though for more safety the value using 3 though with old operating systems it will not work on having used obligatorily NTLMv2.
To follow the link for more information: http://technet.microsoft.com/es-es/magazine/2006.08.securitywatch(en-us).aspx"
Source: http://www.nabble.com/Windows-7-beta-and-NTLM-td21377271.html
Porém é como o Everson falou, você só vai trabalhar com usuários e não com grupos.
Obrigado.
Marlon
