[squid-users] Kerberos / SASL for squid_ldap_group

2010-08-30 Thread Maxim Burgerhout
Hi, I'm trying to build a completely Kerberos-based Squid proxy setup for my company. Everything that's even remotely possible with Kerberos, we're supposed to do with it. Kerberos authentication on Squid 3.1 works easily, so the next step would be to make squid_ldap_group work with Kerberos, too

RE: [squid-users] Kerberos / SASL for squid_ldap_group

2010-08-30 Thread Joseph L. Casale
>But then, in 2006, Henrik Nordstrom says[2] neither squid_ldap_group nor >squid_ldap_auth support Kerberos SSO. After the initial posting of the patch >in '04, I can't >find any more references to it on the mailinglists. See squid_kerb_ldap. http://squidkerbauth.sourceforge.net/ jlc

Re: [squid-users] Kerberos / SASL for squid_ldap_group

2010-08-30 Thread Maxim Burgerhout
Of course I just bumped into that little gem *after* I sent the previous message to this list... It has the downside of not being included in, or supported by downstream distro's though. The major upside of having Kerberos support in Squid's ldap_group helper would be the fact that downstream dist

Re: [squid-users] Kerberos / SASL for squid_ldap_group

2010-08-30 Thread Amos Jeffries
On Mon, 30 Aug 2010 16:32:51 +0200, Maxim Burgerhout wrote: > Of course I just bumped into that little gem *after* I sent the > previous message to this list... > > It has the downside of not being included in, or supported by > downstream distro's though. The major upside of having Kerberos > su

Re: [squid-users] Kerberos / SASL for squid_ldap_group

2010-08-31 Thread Nick Cairncross
> On Mon, 30 Aug 2010 16:32:51 +0200, Maxim Burgerhout > wrote: >> Of course I just bumped into that little gem *after* I sent the >> previous message to this list... >> >> It has the downside of not being included in, or supported by >> downstream distro's though. The major upside of having Ker

Re: [squid-users] Kerberos / SASL for squid_ldap_group

2010-09-02 Thread Amos Jeffries
Nick Cairncross wrote: On Mon, 30 Aug 2010 16:32:51 +0200, Maxim Burgerhout wrote: Of course I just bumped into that little gem *after* I sent the previous message to this list... It has the downside of not being included in, or supported by downstream distro's though. The major upside of havi