Hello,
I would like an opinion of you, I'm implentando squid in the company
where I work and would like to integrate with our active directory
(windows server 2008 R2) in the same way that the ntlm but the same
was giving a little problem because the user accounts were being
blocked.
Sorry I'm a
On tis, 2007-11-27 at 12:05 +0100, [EMAIL PROTECTED] wrote:
Hi All,
is it possible to authenticate a squid (squid-2.6.STABLE6-4.el5) against
Active Directory without using Kerberos ?
You can use LDAP.
Regards
Henrik
signature.asc
Description: This is a digitally signed message part
On tis, 2007-11-27 at 12:31 +0100, [EMAIL PROTECTED] wrote:
@Adrian: Thank you for youre fast answer. Maybe you can help me a bit with
the configuration with Kerberos ?
Most steps are working on my system:
- I have a Kerberos ticket
- wbinfo -g shows the groups in the AD
- getent -g
Isnard, I think I have a problem with samba / winbind. I tried squid using the
squid_unix_group with the machine I´ve configured with Kerberos and it worked.
Now I configured samba on a testmachine that was unconfigured before and tried
wbinfo -g and I become error messages. So I think, that
Hi All,
is it possible to authenticate a squid (squid-2.6.STABLE6-4.el5) against
Active Directory without using Kerberos ?
I found this in the wiki
http://wiki.squid-cache.org/ConfigExamples/WindowsAuthenticationNTLM?hig
hlight=%28%5EConfigExamples/%5B%5E/%5D%2A%24%29, but nothing without
On Tue, Nov 27, 2007, [EMAIL PROTECTED] wrote:
Hi All,
is it possible to authenticate a squid (squid-2.6.STABLE6-4.el5) against
Active Directory without using Kerberos ?
I found this in the wiki
http://wiki.squid-cache.org/ConfigExamples/WindowsAuthenticationNTLM?hig
@Adrian: Thank you for youre fast answer. Maybe you can help me a bit with the
configuration with Kerberos ?
Most steps are working on my system:
- I have a Kerberos ticket
- wbinfo -g shows the groups in the AD
- getent -g shows the groups in the AD, too
But there´s a problem with the squid
Nope, not a clue off the top of my head, sorry.
Adrian
On Tue, Nov 27, 2007, [EMAIL PROTECTED] wrote:
@Adrian: Thank you for youre fast answer. Maybe you can help me a bit with
the configuration with Kerberos ?
Most steps are working on my system:
- I have a Kerberos ticket
- wbinfo
@Adrian: Thank you !
@all others: Has anyone an idea ?
I`m using CentOS 5 with:
squid-2.6.STABLE6-4.el5
squidguard-1.2.0-2.2.el5.rf
samba-common-3.0.23c-2.el5.2.0.2
samba-client-3.0.23c-2.el5.2.0.2
krb5-libs-1.5-29
pam_krb5-2.2.11-1
krb5-workstation-1.5-29
Ralf,
Squid 2.6 has changed external_acl_type parameter from concurrency to
children, so try changing it to:
external_acl_type www_group ttl=0 children=5 %
LOGIN /usr/lib/squid/squid_unix_group -g www
external_acl_type ebay_group ttl=0 children=5 %
LOGIN /usr/lib/squid/squid_unix_group -g Ebay
squid_ldap_group ?
Regards, Ralf
-Ursprüngliche Nachricht-
Von: Isnard Jaquet [mailto:[EMAIL PROTECTED]
Gesendet: Dienstag, 27. November 2007 14:05
An: squid-users@squid-cache.org
Betreff: Re: AW: [squid-users] Authentication on Active Directory
Ralf,
Squid 2.6 has changed external_acl_type
:[EMAIL PROTECTED]
Gesendet: Dienstag, 27. November 2007 14:05
An: squid-users@squid-cache.org
Betreff: Re: AW: [squid-users] Authentication on Active Directory
Ralf,
Squid 2.6 has changed external_acl_type parameter from concurrency to
children, so try changing it to:
external_acl_type
In my opinion I don't need the NTLM stuff when I use the AD system
Is this correct ?
No. When a client does not recognize Kerberos (Win 9X, NT) it falls
back to NTLM
(My area of knowledge is MS, not Linux)
I think Squid will act like a MS client that dos not support Kerberos
On Mon, 3 May 2004, Flavio Borup wrote:
In my opinion I don't need the NTLM stuff when I use the AD system
Is this correct ?
It depends. If you want automatic login to the proxy then you need NTLM.
No. When a client does not recognize Kerberos (Win 9X, NT) it falls
back to NTLM
And in
Hi all,
I am a little bit confused about the setup of Squid with authentication to Active
Directory
I am using: RedHat 9 Squid 2.5 Samba 3.0.2 Windows Server 2000
In the Squid manual is the line:
Squid writes cleartext usernames and passwords when talking to the external
authentication
On Tue, 27 Apr 2004, Johan de Vries wrote:
In the Squid manual is the line:
Squid writes cleartext usernames and passwords when talking to the external
authentication processes
In our AD setup is the use of plaintext passwords not allowed
Still I want Squid to authenticate to the AD domain
16 matches
Mail list logo
