It will work with the right setup (e.g. you have to copy the Kerberos keytab
to all machines and use the -s HTTP/<RR-DNS-name> or -s GSS_C_NO_NAME option
with squid_kerb_auth).
Regards
Markus
"Amos Jeffries" <squid3@xxxxxxxxxxxxx> wrote in message
news:4BF52C87.9080904@xxxxxxxxxxxxxxxx
Emmanuel Lesouef wrote:
Hello,
I'm currently satisfied with my round-robin DNS enabled "cluster" of
two Squid with ntlm authentication.
But, with th appearance of Windows 7 and Windows 2008, I see by
searching for documentation on the web that I need to use Kerberos
Authentication if I would like Internet Explorer 8 from 2008 or 7 to
work.
Do you have any advices for achieving this setup ? What clustering
mechanism do you use. Does the kerberos part of the install need to be
customized to support being put in cluster mode (which needs to be
defined) ?
Thanks for your helps and docs.
PS : Testing it will be easy so I thinks I'll enable Debian Backports
repository in order to have 2.7STABLE9.
Without havign used either, I expect if your clustering setup works with
NTLM it will work equally well or better for Kerberos.
The two protocols are very much similar, with Kerberos doing away with one
of the handshake HTTP reject messages.
Amos
--
Please be using
Current Stable Squid 2.7.STABLE9 or 3.1.3
