[squid-users] Squid and kerberos

Hi everybody!

I would like to use Squid with kerberos authentication - it works, but
unfortunately, there are some computers in my network without kerberos
software. Accessing the web with Firefox is no problem - it prompts for
the username and password and accepts the input. But not IE: it prompts,
too, but the input is never accepted. This is my squid config:

*****

auth_param negotiate program /usr/lib/squid/squid_kerb_auth
auth_param negotiate children 16
auth_param negotiate keep_alive on
auth_param basic program /usr/lib/squid/pam_auth
auth_param basic children 16
auth_param basic realm Squid-Proxy
auth_param basic credentialsttl 2 hours

*****

My main idea is to try kerberos first, and if it fails, use basic
authentication. I don't understand why this works fine with Firefox, but
not with IE.

BTW: I know what means the "children" line, but I have no idea how to
find a reasonable number. Can anyone help me, please?

Thank you,

Jürgen
Received on Thu Apr 25 2013 - 13:50:52 MDT