On Wed, Jan 13, 2010 at 12:14 AM, Matt Richards <m...@mattstone.net> wrote: > Hello, > > I currently have a squid proxy setup and running with AD authentication and > SSO. > > My question is ... is it possiable to have squid only attempt to authenticate > via kerberos for machines that are a > member of the AD domain? > > If needed I can write a script that queries the AD LDAP database for the > machine object.
No. Your best option is to have a dual-squid setup, and use different client configurations for machines in/not in the domain (or something like transparent-for-non-domain and explicitly-configured-for-domain-members). -- /kinkie