Hi Henrik,
At 14.52 11/02/2006, Henrik Nordstrom wrote:
Negotiate (GSSAPI / Kerberos):
+ Microsoft "standard" and future direction
+ Single-sign-on in Windows environments
+ Not plauged by the huge overhead of NTLM authentication
- Not supported in Squid-2.5 (patch available)
- Not supported in Samba-3.x (Samba-4 development snapshots
reportedly works..)
- Not well supported by other browsers than MSIE.
A little correction:
Currently the only released browser supporting Negotiate for proxy
authentication is FireFox 1.5, but just today I have verified that
the new Beta 2 of Internet Explorer 7 is working fine with Squid
(2.5.STABLE12-NEGOTIATE-NT branch) using Negotiate.
- Not even MSIE supports it to proxies (only web servers/accelerators)
- Not following HTTP standard (same design fault as NTLM)
Regards
Guido
-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@xxxxxxxxxxxxxxxxx
WWW: http://www.acmeconsulting.it/
