On Mon, 17 Oct 2005, Baglio, Joe wrote:
> Can you share with me the current state of Squid? There appears to have
> been no development on 3.0 for almost three years. Is the project stalled
> at 2.5?
There is development going on, just that the transition grew a bit larger
than intended and there has not been any reasonably stable versions since
the PRE3 snapshot taken very long ago...
> I specifically am interested in better Kerberos authentication. Current
> Kerberos authentication requires installation of Samba, which in turn
> requires additional configuration and running three additional daemons. A
> helper that performs authentication using the KRB5 libs directly would be
> more efficient.
There is a patch to Squid-2.5 adding the required infrastructure for Squid
to support the "Negotiate" authenitication protocol available from
devel.squid-caceh.org. What is missing is a helper other than Samba-4
which knows sufficient of Microsoft SPNEGO and GSSAPI to help Squid
verifying the authentiaction blobs.. The helper protocol used is the
protocol used by Samba-4 ntlm_auth which in turn is an adaptaion of the
NTLM helper protocol used by Squid-2.5.
This support framework is scheduled to be ported to Squid-3 in a few days
time.
Regards
Henrik
Received on Mon Oct 17 2005 - 07:58:31 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Nov 01 2005 - 12:00:04 MST