Re: [squid-users] squid_ldap_auth with SASL/GSSAPI

15.06.2012 4:51, Amos Jeffries пишет:
> On 14/06/2012 11:25 p.m., Павел Бычихин wrote:
>> 14.06.2012 13:11, Amos Jeffries пишет:
>>> On 14/06/2012 7:57 p.m., Павел Бычихин wrote:
>>>> Hi!
>>>>
>>>> Is it possible to use squid_ldap_auth with SASL/GSSAPI (My SQUID ver. is 3.1.19)
>>>>
>>>
>>> * LDAP is a database access protocol
>>> * SASL is a framework layer.
>>> * GSSAPI is a Windows function API.
>>>
>>> One guess which squid_ldap_auth uses?
>>>
>>> You want SASL you try to find the "SASL" auth helper.
>>>
>>> You want GSSAPI you try to find the "SSPI" auth helper (only available on Windows native builds).
>>>
>>> http://www.squid-cache.org/Doc/man/
>>>
>>> (don't be fooled by the "Squid Version" column. That is only where the helper is documented for. Most of them exist in older Squid versions back to
>>> 2.6 but in an undocumented form which differ slightly from the 3.2 release helper)
>>>
>>> Amos
>>>
>>
>> I apologize for the inaccurate question.
>> I need, that squid_ldap_auth did the authentication using Kerberos while connecting to Active Directory controler.
>> Is it possible?
>>
>
> Not with that helper, no. squid_ldap_auth takes in Basic authentication tokens.
>
> There is a different helper needed to perform Kerberos over LDAP.
> http://squidkerbauth.sourceforge.net/
>
> Amos
>
> Amos
>

Thank you, Amos. I'll try it.

-- 
С уважением,
Павел Бычихин
КП "ХТС"
тел. (057) 758-84-12