Re: [squid-users] Connection Pinning

From: Matus UHLAR - fantomas <uhlar_at_fantomas.sk>
Date: Fri, 9 Oct 2009 18:13:03 +0200

On 09.10.09 11:26, Ross Kovelman wrote:
> Is there a way to get this to work in 2.5:
> http://wiki.squid-cache.org/Features/ConnPin
>
> Connection Pinning is especially useful for proxied connections to servers
> using Microsoft Integrated Login (NTLM/Negotiate), it needs:
> * code to tie a client-side and a server-side socket exclusively when needed
> * code to activate the tying when a stateful authentication layer is seen
> * code to mark the objects downloaded over a pinned connection uncacheable
> * code to add a header advertising this capability to clients
> The HTTP protocol extensions used to negotiate this is documented in
> Internet Draft draft-jaganathan-kerberos-http-01.txt (a copy can be found in
> doc/rfc/ in the development tree)
>
> This feature has been implemented for Squid-2.6
> <http://wiki.squid-cache.org/Squid-2.6> by HenrikNordström
> <http://wiki.squid-cache.org/HenrikNordstr%C3%B6m> during the
> CodeSprintOct2005 <http://wiki.squid-cache.org/CodeSprintOct2005> code
> sprint in Torino.
>
> Connection Pinning has been re-implemented in Squid 3.1
>
>
> I need to get this to work so the user can authenticate to a sharepoint
> site.

Why not upgrade to 2.7 (stable) or 3.1 (beta)?
They have much more features and 2.5 (even 2.6) is obsolete now and may have
security bugs

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
   One OS to rule them all, One OS to find them, 
One OS to bring them all and into darkness bind them 
Received on Fri Oct 09 2009 - 16:13:09 MDT

This archive was generated by hypermail 2.2.0 : Fri Oct 09 2009 - 12:00:02 MDT