"Nick Cairncross" <Nick.Cairncross@xxxxxxxxxxxxxxx> wrote in message
news:99A993AA-7D9F-49A2-BF7B-4BD51B109861@xxxxxxxxxxxxxxxxxx
On Mon, 30 Aug 2010 16:32:51 +0200, Maxim Burgerhout <maxim@xxxxxxxxx>
wrote:
Of course I just bumped into that little gem *after* I sent the
previous message to this list...
It has the downside of not being included in, or supported by
downstream distro's though. The major upside of having Kerberos
support in Squid's ldap_group helper would be the fact that downstream
distro's (the Red Hats, Canonicals and Novells of this world) would be
more likely to support it. But I just checked out the squidkerbldap
project, and it seems to work ok. The fact it handles the Kerberos
cache in memory is especially nice.
... yet. Markus submitted it for bundling and its just passed our
upstream
QA. It hit Squid-3.2 beta bundles under the name
ext_kerberos_ldap_group_acl as of a few days ago. Along with a lot of
Kerberos support in other auth-related areas of Squid and associated
tools.
Amos
Amos,
Re: 3.2
Does this means an NTLM and Kerberos authentication helper wrapped in
one..? So no need for two helpers..?
No it does not mean that.
Thanks
The information contained in this e-mail is of a confidential nature and is
intended only for the addressee. If you are not the intended addressee,
any disclosure, copying or distribution by you is prohibited and may be
unlawful. Disclosure to any party other than the addressee, whether
inadvertent or otherwise, is not intended to waive privilege or
confidentiality. Internet communications are not secure and therefore
Conde Nast does not accept legal responsibility for the contents of this
message. Any views or opinions expressed are those of the author.
The Conde Nast Publications Ltd (No. 226900), Vogue House, Hanover Square,
London W1S 1JU
Markus
