Re: [SQU] NDS Autentication

From: Robert Collins <robert.collins@dont-contact.us>
Date: Sun, 29 Oct 2000 00:05:24 +1100

Is this using basic, Digest or NTLM authentication for the browser? I didn't
think IE (or netscape for that matter) would present credentials to a proxy
other than NTLM without prompting the user.

The back-end system (LDAP/NDS/htpasswd etc) is largely irrelevant for
"seamless" logins - what matters is the front end presented to the
application.

I would be very interested to know what http headers Bordermanager returns
to IE with the 407 (Proxy authentication required) prompt when the user
starts up IE. That would pretty much tell you what is going on.

Rob

----- Original Message -----
From: "John Lauro" <jlauro@umich.edu>
To: <squid-users@ircache.net>
Sent: Saturday, October 28, 2000 11:30 PM
Subject: Re: [SQU] NDS Autentication

> Henrik Nordstrom wrote:
>
> > Fabricio Lima wrote:
> >
> > > Can I do the same with squid? (sure, using remote autentication!)
> > > But how? Which is the name of the "module" that makes a communication
> > > between squid and NDS ???
> >
> > I think you can use the ldap_auth module for authenticating against NDS
> > if exported using the LDAP service.
>
> Correct me if I am wrong, but as I understand LDAP but haven't actually
> tried it.... That might work, but from what I understand LDAP wouldn't be
> transparent and would be "SAME" login, and not "SINGLE" login. The user
> would have to login into squid, instead of it authenticating transparently
> in the background on first connect.
>
> With Bordermanager, you login once into the network. (Well, for Windows
> machines.... Mac and Unix are closer to what I assume LDAP would be, and
> require a login via the browser....)
>
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
>
>

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Sat Oct 28 2000 - 07:02:34 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:56:01 MST