RE: [squid-users] Kerberos authentication & pre-caching in Squid for Windows

I have been trying to see what authentication options that I have as well
(in regards to AD & LDAP). I would assume that the suggestion given of using
the 2.7 binaries for Windows would imply that Squid will be ran on Windows.

What would the said suggestion be for Linux Squid users? I do not really
want to use Basic Authentication. I believe in a bit more security...

Thanks!

-----Original Message-----
From: Guido Serassio [mailto:guido.serassio_at_acmeconsulting.it]
Sent: Friday, August 07, 2009 6:22 AM
To: Holly King; Squid Mailinglist
Subject: Re: [squid-users] Kerberos authentication & pre-caching in Squid
for Windows

Hi,

At 11.30 07/08/2009, Holly King wrote:

>Hello, I'm trying to set up a pilot to replace proprietary caches in
>schools. Because of training issues with on-site technicians I'm kinda
>stuck with using Windows but would like to use Squid.
>
>Stumbling
>block 1 - I've not been able to find any documentation on Kerberos
>authentication by Squid for Windows (just on *nix), can anyone point me
>in the right direction? Ideally I would want to be able to
>authenticate on a group level so site technicians just move accounts
>into/out of a group to allow or deny access. Also, is there a way to
>add whitelists regardless so pupils can be banned from the internet yet
>still access resources needed for lessons?

A Windows native Negotiate (Kerberos) helper is included in official
Squid sources starting from Squid 2.6 STABLE 1.

Just download the latest 2.7 binaries for Windows
(http://wiki.squid-cache.org/SquidFaq/BinaryPackages) and configure
squid to use the mswin_negotiate_auth.exe helper for negotiate auth
schema, no options are required, it works just out of the box.

Regards

Guido

-
=========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Gold Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio_at_acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Fri Aug 07 2009 - 18:00:45 MDT