RE: secure authentication with ldap server ?

[Nottingham, Mark (Australia)]

For the squid <-> LDAP portion, you'll need to use SSL LDAP, or certificates
(don't know of any implementations of this).
For the squid <-> client portion, use HTTP Digest Authentication.

Does anyone know which/if any browsers support Digest Proxy Authentication?


> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 17, 1999 8:29 PM
> To: [EMAIL PROTECTED]
> Subject: secure authentication with ldap server ?
> 
> 
> Hi!
> 
> We are use ldap_auth for authentication to my Netscape LDAP server.
> 
> My problem is: this authentication is a clear text, and some 
> network monitor
> program can to monitor the passwords...
> 
> How to make this session is secure ?
> 
> Second problem: the autentication string between client and 
> the cache server
> only encoded.This is not problem for an advanced user(hacker)...
> 
> How to make this communication is secure ?
> 
> We are use squid 2.1-patch2 under linux.
> Thanks in advance!                      
> 
> Bye!Lajos
>