Re: [squid-users] secured authentication

2009-10-05 Thread Henrik Nordstrom
tis 2009-09-29 klockan 21:28 -0500 skrev David Boyer: > I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic > authentication, and it wasn't terribly difficult to set up. What > concerns me is the passing of credentials from the browser to Squid in > plain text. When we use basic authenti

Re: [squid-users] secured authentication

2009-10-02 Thread Luis Daniel Lucio Quiroz
Le vendredi 2 octobre 2009 10:46:44, donovan jeffrey j a écrit : > On Sep 30, 2009, at 1:10 AM, Amos Jeffries wrote: > > For proxy-browser authentication: > > > > The preferred option is Kerberos / Negotiate authentication. I'm > > not sure of the Safari support level. IE needs to be version 7 or

Re: [squid-users] secured authentication

2009-10-02 Thread donovan jeffrey j
On Sep 30, 2009, at 1:10 AM, Amos Jeffries wrote: For proxy-browser authentication: The preferred option is Kerberos / Negotiate authentication. I'm not sure of the Safari support level. IE needs to be version 7 or newer. Second best is NTLM. They should all support that. Squid has som

Re: [squid-users] secured authentication

2009-09-29 Thread Amos Jeffries
David Boyer wrote: I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic authentication, and it wasn't terribly difficult to set up. What concerns me is the passing of credentials from the browser to Squid in plain text. When we use basic authentication anywhere else, the web site usuall

Re: [squid-users] secured authentication

2009-09-29 Thread Tejpal Amin
David, You could use NTLM or kerberos auth to achieve the same. This will also allow you to have single sign on to teh proxy. Warm Regards Tej On Wed, Sep 30, 2009 at 7:58 AM, David Boyer wrote: > I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic > authentication, and it wasn't t

[squid-users] secured authentication

2009-09-29 Thread David Boyer
I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic authentication, and it wasn't terribly difficult to set up. What concerns me is the passing of credentials from the browser to Squid in plain text. When we use basic authentication anywhere else, the web site usually requires HTTPS.