Re: [squid-users] Authentication FAQ?

Very good idea indeed.

You are most welcome to try to collect the information for such FAQ
entry.

Relevant items you might want to cover:

The different authentication schemes, and how they compare

 basic auth

 ntlm auth

 digest auth

 ident (ident is not really an auth scheme, but it fits quite nicely
in the picture)

The different authentication helpers, and how to select which one to
use

  basic auth
     NCSA
     LDAP
     radius
     winbind
     PAM
     ...

  ntlm auth
     SMB
     winbind
     ...

  digest auth
     password

Group integration via external acl and it's different group helpers
(note: not all external_acl helpers are group helpers, the same
mechanism may be used for many things)

If you have any specific questions just ask and I will try to provide
accurate information, usually within a day.

Regards
Henrik

On Tuesday 10 December 2002 21.11, McCracken, Stephen wrote:
> I have been looking through the FAQ and the mailing list to try to
> understand which auth scheme might work best for us. In doing
> this, I thought it might be useful for some of the more
> knowledgable members of the group to compile a sort of grid for a
> FAQ entry (23.0? 23.1.1?) that included something of the
> advantages (encrypted, supported by all browsers, etc),
> disadvantages (another password file, not HTTP compliant, etc), the
> configure switches needed, and any prerequisites (ident - server on
> each client, etc) similar to the following:
>
> auth scheme - advantages - disadvantages - configure switches -
> prerequisites
>
> ident
> winbind
> Radius
> NTLM
> basic
> LDAP
> digest
> MSNT
> SMB
> NCSA
> PAM
> Others?
>
> I could even try to compile the information comparing the different
> schemes if those with greater knowledge than me could feed me the
> information.
>
> Would it be a good idea?
Received on Tue Dec 10 2002 - 17:34:09 MST