One partial answer to my own question: in the proxypac, ftp traffic could be diverted to another proxy: if (shExpMatch(url, "ftp:*")) { return "PROXY otherproxy.mysite.ch:80"; } On 17 April 2013 08:56, Sean Boran <sean@xxxxxxxxx> wrote: > Hi, > > Kerberos is authenticating http/s traffic for me from certain client > addresses just fine. > However ftp is being rejected, does the browser+squid not auth ftp in > the same way as http? > > If ftp does work with kerberos, is there a way (ACL) that ftp traffic > can be excluded from kerberos auth? > > Thanks in advance, > > Sean