Re: [squid-users] squid_ldap_auth with SASL/GSSAPI

On 14/06/2012 11:25 p.m., Павел Бычихин wrote:
> 14.06.2012 13:11, Amos Jeffries пишет:
>> On 14/06/2012 7:57 p.m., Павел Бычихин wrote:
>>> Hi!
>>>
>>> Is it possible to use squid_ldap_auth with SASL/GSSAPI (My SQUID
>>> ver. is 3.1.19)
>>>
>>
>> * LDAP is a database access protocol
>> * SASL is a framework layer.
>> * GSSAPI is a Windows function API.
>>
>> One guess which squid_ldap_auth uses?
>>
>> You want SASL you try to find the "SASL" auth helper.
>>
>> You want GSSAPI you try to find the "SSPI" auth helper (only
>> available on Windows native builds).
>>
>> http://www.squid-cache.org/Doc/man/
>>
>> (don't be fooled by the "Squid Version" column. That is only where
>> the helper is documented for. Most of them exist in older Squid
>> versions back to
>> 2.6 but in an undocumented form which differ slightly from the 3.2
>> release helper)
>>
>> Amos
>>
>
> I apologize for the inaccurate question.
> I need, that squid_ldap_auth did the authentication using Kerberos
> while connecting to Active Directory controler.
> Is it possible?
>

Not with that helper, no. squid_ldap_auth takes in Basic authentication
tokens.

There is a different helper needed to perform Kerberos over LDAP.
http://squidkerbauth.sourceforge.net/

Amos

Amos
Received on Fri Jun 15 2012 - 01:51:52 MDT