Of course I just bumped into that little gem *after* I sent the previous message to this list... It has the downside of not being included in, or supported by downstream distro's though. The major upside of having Kerberos support in Squid's ldap_group helper would be the fact that downstream distro's (the Red Hats, Canonicals and Novells of this world) would be more likely to support it. But I just checked out the squidkerbldap project, and it seems to work ok. The fact it handles the Kerberos cache in memory is especially nice. Thanks for answering! On Mon, Aug 30, 2010 at 13:11, Joseph L. Casale <jcasale@xxxxxxxxxxxxxxxxx> wrote: >>But then, in 2006, Henrik Nordstrom says[2] neither squid_ldap_group nor squid_ldap_auth support Kerberos SSO. After the initial posting of the patch in '04, I can't >find any more references to it on the mailinglists. > > See squid_kerb_ldap. > http://squidkerbauth.sourceforge.net/ > jlc > -- Maxim Burgerhout maxim@xxxxxxxxx ---------------- GPG Fingerprint EB11 5E56 E648 9D99 E8EF 05FB C513 6FD4 1302 B48A
