Search squid archive

Re: Advices for a squid cluster with kerberos auth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



It will work with the right setup (e.g. you have to copy the Kerberos keytab to all machines and use the -s HTTP/<RR-DNS-name> or -s GSS_C_NO_NAME option with squid_kerb_auth).

Regards
Markus

"Amos Jeffries" <squid3@xxxxxxxxxxxxx> wrote in message news:4BF52C87.9080904@xxxxxxxxxxxxxxxx
Emmanuel Lesouef wrote:
Hello,

I'm currently satisfied with my round-robin DNS enabled "cluster" of
two Squid with ntlm authentication.

But, with th appearance of Windows 7 and Windows 2008, I see by
searching for documentation on the web that I need to use Kerberos
Authentication if I would like Internet Explorer 8 from 2008 or 7 to
work.

Do you have any advices for achieving this setup ? What clustering
mechanism do you use. Does the kerberos part of the install need to be
customized to support being put in cluster mode (which needs to be
defined) ?

Thanks for your helps and docs.

PS : Testing it will be easy so I thinks I'll enable Debian Backports
repository in order to have 2.7STABLE9.


Without havign used either, I expect if your clustering setup works with NTLM it will work equally well or better for Kerberos.

The two protocols are very much similar, with Kerberos doing away with one of the handshake HTTP reject messages.

Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.3




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux