15.06.2012 20:17, Markus Moeller пишет:
Hi Amos,
http://squidkerbauth.sourceforge.net/ has only my helper squid_kerb_auth and squid_kerb_ldap which are both availabel in squid 3.2 as
negotiate_kerberos_auth authentication helper and kerberos_ldap_group as external acl helper.
So not exactly what was asked for I think.
Markus
Amos suggested exactly what i need: squid_kerb_ldap.
In my system (FreeBSD 8.2) SQUID 3.2 is unavailable from ports. In addition, SQUID 3.2 is still beta.
For this reason, I did not install SQUID 3.2 and had no idea about kerberos_ldap_group.
"Amos Jeffries" <squid3@xxxxxxxxxxxxx> wrote in message news:4FDA952A.2030201@xxxxxxxxxxxxx...
On 14/06/2012 11:25 p.m., Павел Бычихин wrote:
14.06.2012 13:11, Amos Jeffries пишет:
On 14/06/2012 7:57 p.m., Павел Бычихин wrote:
Hi!
Is it possible to use squid_ldap_auth with SASL/GSSAPI (My SQUID ver. is 3.1.19)
* LDAP is a database access protocol
* SASL is a framework layer.
* GSSAPI is a Windows function API.
One guess which squid_ldap_auth uses?
You want SASL you try to find the "SASL" auth helper.
You want GSSAPI you try to find the "SSPI" auth helper (only available on Windows native builds).
http://www.squid-cache.org/Doc/man/
(don't be fooled by the "Squid Version" column. That is only where the helper is documented for. Most of them exist in older Squid versions back to
2.6 but in an undocumented form which differ slightly from the 3.2 release helper)
Amos
I apologize for the inaccurate question.
I need, that squid_ldap_auth did the authentication using Kerberos while connecting to Active Directory controler.
Is it possible?
Not with that helper, no. squid_ldap_auth takes in Basic authentication tokens.
There is a different helper needed to perform Kerberos over LDAP.
http://squidkerbauth.sourceforge.net/
Amos
Amos
--
С уважением,
Павел Бычихин
КП "ХТС"
тел. (057) 758-84-12
