On Mon, 17 Oct 2005, Baglio, Joe wrote:
Can you share with me the current state of Squid? There appears to have been no development on 3.0 for almost three years. Is the project stalled at 2.5?
There is development going on, just that the transition grew a bit larger than intended and there has not been any reasonably stable versions since the PRE3 snapshot taken very long ago...
I specifically am interested in better Kerberos authentication. Current Kerberos authentication requires installation of Samba, which in turn requires additional configuration and running three additional daemons. A helper that performs authentication using the KRB5 libs directly would be more efficient.
There is a patch to Squid-2.5 adding the required infrastructure for Squid to support the "Negotiate" authenitication protocol available from devel.squid-caceh.org. What is missing is a helper other than Samba-4 which knows sufficient of Microsoft SPNEGO and GSSAPI to help Squid verifying the authentiaction blobs.. The helper protocol used is the protocol used by Samba-4 ntlm_auth which in turn is an adaptaion of the NTLM helper protocol used by Squid-2.5.
This support framework is scheduled to be ported to Squid-3 in a few days time.
Regards Henrik
