Re: icap in squid3

2007-02-13 Thread Alex Rousskov
On Tue, 2007-02-13 at 08:09 +0100, Axel Westerhold wrote: One comment on a nice feature I would like to have but still considering for security reasons: When an ICAP Server requieres auth for user mapping to rules/policies you sometimes run into a problem with sources with can't auth or

Re: icap in squid3

2007-02-12 Thread Alex Rousskov
On Mon, 2007-02-12 at 08:38 +0100, Axel Westerhold wrote: Well, the syntax you are proposing is somewhat limited. Here are my comments: 1.) cn=%u assumes that the used username equals the assigned CN which is most of the time wrong. Normally the UID (or in AD the samaccountname) is used

Re: icap in squid3

2007-02-12 Thread Axel Westerhold
Hi Alex, Am 13.02.2007 6:03 Uhr schrieb Alex Rousskov unter [EMAIL PROTECTED]: On Mon, 2007-02-12 at 08:38 +0100, Axel Westerhold wrote: Well, the syntax you are proposing is somewhat limited. Here are my comments: 1.) cn=%u assumes that the used username equals the assigned CN

Re: icap in squid3

2007-02-11 Thread Axel Westerhold
Good morning, Well, the syntax you are proposing is somewhat limited. Here are my comments: 1.) cn=%u assumes that the used username equals the assigned CN which is most of the time wrong. Normally the UID (or in AD the samaccountname) is used for authentication. This will lead to a failure

icap in squid3

2007-02-09 Thread Jeremy Hall
Hello, I can't remember. What was the decided path for what was once the icap_auth_scheme? I recall there was some concern about my suggestion of having the ability to use ldap://hostname/cn=%u,dc=%d,dc=name,dc=int but I don't remember what the outcome was. _J

Re: icap in squid3

2007-02-09 Thread Alex Rousskov
On Fri, 2007-02-09 at 15:55 -0500, Jeremy Hall wrote: Hello, I can't remember. What was the decided path for what was once the icap_auth_scheme? I recall there was some concern about my suggestion of having the ability to use ldap://hostname/cn=%u,dc=%d,dc=name,dc=int but I don't