Re: PAM module and autentification i Squid

Armistead, Jason wrote:

> Bottom line - if the REALM is different, the browser SHOULD ask the user for
> a username / password before attempting re-authenticating.

Problem is that the browsers do not figure out that the realm is
different until access is denied. At least Netscape assumes the realm is
the same and always sends the login information if known. Squid has no
way of determinig the realm the user was asked to authenticate under
since it is not part of the requests (only of the access denied messages
sent by Squid).

--
Henrik Nordstrom
Squid hacker