Re: [squid-users] force popup with kerberos+sso from only one machine of domain

From: Usuario Lista <usuario.foros.listas_at_gmail.com>
Date: Tue, 24 Sep 2013 14:14:25 +0200

Thanks!!!! works perfectly.

2013/9/20 Amos Jeffries <squid3_at_treenet.co.nz>:
> On 13/09/2013 8:29 p.m., Usuario Lista wrote:
>>
>> Currently I have configured squid with kerberos and sso 3.3.3 for all
>> computers in the domain and working great.
>> Now, I have to configure a domain computer so they can use many users
>> with free access to internet, but I want them controlled.
>> Then, I want the browser from that MAC user and password request for
>> each user you want to browse.
>> As I can force from the MAC to leave the username and password popup
>> asking?
>> The pc will enter with a generic user domain.
>
>
> No you cannot force the popup. It is a browser feature. All you can do is
> reject authentication with the generic domain credentials (if the
> authenticatino helepr permits that) or reject access using them (as below).
> Both of which tell the browser the credentials sent already are not
> acceptible for that request - it MAY then choose to use the popup, or try
> something else.
>
> acl genericDomain proxy_auth_regex @GENERICDOMAIN
> http_access deny genericDomain
>
> Amos
Received on Tue Sep 24 2013 - 12:14:32 MDT

This archive was generated by hypermail 2.2.0 : Tue Sep 24 2013 - 12:00:04 MDT