[squid-users] Re: Two authentication helpers in one instance

[Markus Moeller]

Hi Rafael,

 squid_kerb_auth can not handle basic authentication. You need an auth 
handle which can use the username/password from basic authentication. It is 
not a good idea to use the domain username/password with basic auth and not 
SSL encryption.


Does skype or your other clients work with NTLM or Negotiate/NTLM ?

Markus


"Rafal Zawierta"  wrote in message 
news:capxtas-_rkmhi8sz88td8nqp_qesvk8_8hr_taoersfafkt...@mail.gmail.com...

OK, now it's clear for me (that the browser will choose method).

But now I should enable fallback method to my negotiate
squid_kerb_auth, becaouse Skype and other stuff won't work with
negotiate helper.

Can I use squid_kerb_auth both in negotiate and in basic mode? If
browser is ok (IE8, IE9, FF, Chrome) - negotiate will fork fine. Else
- basic auth.

auth_param negotiate program  /usr/lib/squid3/squid_kerb_auth
auth_param negotiate children 5
auth_param negotiate keep_alive on

auth_param basic program  /usr/lib/squid3/squid_kerb_auth
auth_param basic children 5
auth_param basic keep_alive on

Regards

Re: [squid-users] Re: Two authentication helpers in one instance

[Rafał Zawierta]

> Hi Rafael,
>
>  squid_kerb_auth can not handle basic authentication. You need an auth
> handle which can use the username/password from basic authentication. It is
> not a good idea to use the domain username/password with basic auth and not
> SSL encryption.
>
> Does skype or your other clients work with NTLM or Negotiate/NTLM ?
>
> Markus

Hi Markus!

I'll check NTLM with skype as soon as I recover admin password for my
dev environment :)

All traffic is in isolated "corporate" network and basic auth is
acceptable, but I'll try NTLM first.

Regards