Squidly wrote:
Is running samba the only way for squid not to use clear text passwords?
On Fri, May 30, 2008 at 2:41 AM, Henrik Nordstrom
<henrik@xxxxxxxxxxxxxxxxxxx> wrote:
http://wiki.squid-cache.org/KnowledgeBase/LdapBackedDigestAuthentication
On tor, 2008-05-29 at 20:42 -0700, Squidly wrote:
Is there a good guide detailing how to set this digest up with openLdap?
On Thu, May 29, 2008 at 4:40 PM, Henrik Nordstrom
<henrik@xxxxxxxxxxxxxxxxxxx> wrote:
On tor, 2008-05-29 at 16:21 -0700, Squidly wrote:
I am hoping there is a way to encrypt user name and password as they
are are passed from the browser to my debian squid box. I have looked
around the web and just keep getting more confused. I found some
reference to digest_ldap_auth but that does not exist in my lib and
seems to be for windowz. Does someone know a good reference?
digest_ldap_auth is a standard digest helper shipped with Squid since
some years back.. It's not Windows related.
The use of digest requires access to either plaintext passwords or
specifically digest hashed password hashes in the LDAP directory. It can
not use simple LDAP authentication like squid_ldap_auth.
Regards
Henrik
You that use the basic Auth ? if yes , this is encoded in Base64, so is
clear text .... everyone sniffer may decode this passwords or programer
language that support base64 encode ....
--
Emanuel dos Reis Rodrigues
Senior Level Linux Professional (LPIC-3)
emanueldosreis@xxxxxxxxx
+55 95 8112-9628