Re: [squid-users] Confusing about login name in AD-proxy authentication?
On tis, 2007-09-25 at 12:10 +0700, chowalit.lab Chowalit Lab Linux wrote: How every I found that windows 2003 have new style of login name i.e. [EMAIL PROTECTED]. For information of Kinkie advice me to code auth helper. Any way to solve this ? I'm not sure that current samba helper is support new style of login name. Any suggestion Should work using a negotiate helper. - Samba ntlm_auth --helper-protocol=gss-spnego - squid_kerb_auth (shipped with current Squid versions) Regards Henrik signature.asc Description: This is a digitally signed message part
Re: [squid-users] Confusing about login name in AD-proxy authentication?
On 9/22/07, Henrik Nordstrom [EMAIL PROTECTED] wrote: he is talking about using Windows Integrated Login to have the client automatically log in to the proxy, just as it automatically logs in to any other server on your network. http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication#head-1d6e24e071a1a5e65f112d9a96cdf1320684a8f2 Perhaps we should add that the client machine must be a member of a domain trusted by the DC or equivalent to obtain truly seamless authentication. And even then, it is mostly with the browser. Other apps may prompt if they don't cowtow to M$ properly. Chris
Re: [squid-users] Confusing about login name in AD-proxy authentication?
Hi Henrik and Chris Thanks for your reply. In my system we have automatic authenticate on my proxy. For example, client logon to domain she can use proxy automatically. But for other clients who don't login to my domain they must login with old NT format i.e. MYDOMAIN\username. How every I found that windows 2003 have new style of login name i.e. [EMAIL PROTECTED]. For information of Kinkie advice me to code auth helper. Any way to solve this ? I'm not sure that current samba helper is support new style of login name. Any suggestion Thanks Chong On 9/24/07, Chris Nighswonger [EMAIL PROTECTED] wrote: On 9/22/07, Henrik Nordstrom [EMAIL PROTECTED] wrote: he is talking about using Windows Integrated Login to have the client automatically log in to the proxy, just as it automatically logs in to any other server on your network. http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication#head-1d6e24e071a1a5e65f112d9a96cdf1320684a8f2 Perhaps we should add that the client machine must be a member of a domain trusted by the DC or equivalent to obtain truly seamless authentication. And even then, it is mostly with the browser. Other apps may prompt if they don't cowtow to M$ properly. Chris
Re: [squid-users] Confusing about login name in AD-proxy authentication?
Hi Kinkie FYI . I'm not clear about your reply. Please explain your message. I'm sorry.. Thanks Chong On 9/20/07, Terry Dobbs [EMAIL PROTECTED] wrote: Couldn't you just user seamless authentication? Where users don't have to authenticate if they are already logged in? -Original Message- From: chowalit.lab Chowalit Lab Linux [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 19, 2007 12:26 PM To: Kinkie Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Confusing about login name in AD-proxy authentication? Oh.. Bad news for me... Oh coding Thanks you On 9/17/07, Kinkie [EMAIL PROTECTED] wrote: On 9/15/07, chowalit.lab Chowalit Lab Linux [EMAIL PROTECTED] wrote: Dear All First of all I will explain about my system. I have authenticate proxy with account from windows 2003 server. I use ntlm. On login pop-up, I must use MYDOMAIN\username into login box. My question is -- How to configurate my system (both of windows and squid) to support login name like [EMAIL PROTECTED]? It's doable but it requires some coding on the auth helpers to parse and normalize the user name. -- /kinkie
Re: [squid-users] Confusing about login name in AD-proxy authentication?
On lör, 2007-09-22 at 14:25 +0700, chowalit.lab Chowalit Lab Linux wrote: Hi Kinkie FYI . I'm not clear about your reply. Please explain your message. I'm sorry.. Wasn't Kinkie.. it was Terry, he is talking about using Windows Integrated Login to have the client automatically log in to the proxy, just as it automatically logs in to any other server on your network. http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication#head-1d6e24e071a1a5e65f112d9a96cdf1320684a8f2 Regards Henrik Thanks Chong On 9/20/07, Terry Dobbs [EMAIL PROTECTED] wrote: Couldn't you just user seamless authentication? Where users don't have to authenticate if they are already logged in? signature.asc Description: This is a digitally signed message part
Re: [squid-users] Confusing about login name in AD-proxy authentication?
Oh.. Bad news for me... Oh coding Thanks you On 9/17/07, Kinkie [EMAIL PROTECTED] wrote: On 9/15/07, chowalit.lab Chowalit Lab Linux [EMAIL PROTECTED] wrote: Dear All First of all I will explain about my system. I have authenticate proxy with account from windows 2003 server. I use ntlm. On login pop-up, I must use MYDOMAIN\username into login box. My question is -- How to configurate my system (both of windows and squid) to support login name like [EMAIL PROTECTED]? It's doable but it requires some coding on the auth helpers to parse and normalize the user name. -- /kinkie
RE: [squid-users] Confusing about login name in AD-proxy authentication?
Couldn't you just user seamless authentication? Where users don't have to authenticate if they are already logged in? -Original Message- From: chowalit.lab Chowalit Lab Linux [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 19, 2007 12:26 PM To: Kinkie Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Confusing about login name in AD-proxy authentication? Oh.. Bad news for me... Oh coding Thanks you On 9/17/07, Kinkie [EMAIL PROTECTED] wrote: On 9/15/07, chowalit.lab Chowalit Lab Linux [EMAIL PROTECTED] wrote: Dear All First of all I will explain about my system. I have authenticate proxy with account from windows 2003 server. I use ntlm. On login pop-up, I must use MYDOMAIN\username into login box. My question is -- How to configurate my system (both of windows and squid) to support login name like [EMAIL PROTECTED]? It's doable but it requires some coding on the auth helpers to parse and normalize the user name. -- /kinkie
Re: [squid-users] Confusing about login name in AD-proxy authentication?
On 9/15/07, chowalit.lab Chowalit Lab Linux [EMAIL PROTECTED] wrote: Dear All First of all I will explain about my system. I have authenticate proxy with account from windows 2003 server. I use ntlm. On login pop-up, I must use MYDOMAIN\username into login box. My question is -- How to configurate my system (both of windows and squid) to support login name like [EMAIL PROTECTED]? It's doable but it requires some coding on the auth helpers to parse and normalize the user name. -- /kinkie
