ntlm_auth account lockout problem

[Dave Augustus]

Hello to those of you using ntlm_auth with Squid in a Windows PDC
environment!

We have installed Squid in a test config but a problem has cropped up
where users accounts are being "locked out" randomly. This will happen
while they are surfing - an auth will popup and their account is then
locked.

Any insight?

Here is my squid config:
(yes, I am using Samba V3's ntlm_auth, not squid's)


auth_param ntlm program /usr/local/bin/ntlm_auth
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm max_challenge_reuses 5
auth_param ntlm max_challenge_lifetime 10 minutes

squid 2.5stable4 on Redhat 9
kerberos 1.3.1
Samba V3

Windows PDC on W2K



Thanks,

Dave Augustus