Re: [squid-users] Squid with auth Kerberos

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 11 Dec 2009 16:03:08 +1300

Phibee Network Operation Center wrote:
> Hi
>
> I use actually Squid with NTLM authentication, that work very good with XP
>
> We have tested our configuration with Windows 7, and authentication
> don't work.
>
> My config:
> Squid 3.0-Stable7
> Winbind/Samba 3.2.0-1
>
> conf:
>
> auth_param ntlm program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-ntlmssp
> auth_param ntlm children 25
> auth_param ntlm keep_alive on
> auth_param basic program /usr/bin/ntlm_auth
> --helper-protocol=squid-2.5-basic
> auth_param basic children 25
> auth_param basic realm Squid proxy-caching web server
> auth_param basic credentialsttl 2 hours
> #external_acl_type AD_Group children=50 concurrency=50 %LOGIN
> /usr/lib/squid/wbinfo_group.pl
> external_acl_type AD_Group children=50 concurrency=50 ttl=1800
> negative_ttl=900 %LOGIN /usr/lib/squid/wbinfo_group.pl
>
>
> I know that Windows 7 want a auth in Kerberos. What is the solution for
> add Kerberos auth at my squid
> for a compatibility ?

Um... you just described the solution: "add Kerberos auth at [your] squid"

>
> I have tested with classic kerberos configuration,

What 'classic' config? there are many available and none of them
'classic' by any meaning of that word I know.

> but now squid request
> the user/password

... which indicates a problem with how you configured it. We can't help
without further details on what exact config you tried to use.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20
   Current Beta Squid 3.1.0.15
Received on Fri Dec 11 2009 - 03:03:21 MST

This archive was generated by hypermail 2.2.0 : Fri Dec 11 2009 - 12:00:02 MST