NTLM is auth against the AD via integrated auth (IE) Basic is auth via tying username and password...
Von: Younes EL AMRAOUI [mailto:[email protected]] Gesendet: Donnerstag, 23. Juni 2011 21:22 An: [email protected] Betreff: Re: [pfSense Support] psSense , AD, Kerberos, FreeBSD, Samba,Squid,SquidGuard Thank you for your response. Yes it's different of what I'm looking for, but I found I way, actually there is category in Squid configuration in pfSense GUI called Authori ..., in this category we can specify our Domain and the method of authorization ( LPDA, RADIUS, NT Domain) , I choose NT Domain, and for now I need to integrate my pfSense machine in the AD(Active Directory) of the Windows Server of the company to test if it works ( I will do this tomorrow ), we can test with a client in the AD having my pfSense Squid by seeing in the access.log file the username of the client machine. I found that there an implementation of squid_raduis_auth package ( you can check this with pkg_info ).RADUIS replace kerberos and samba, I think!!,I'm not shore. I can't find the difference between : -NTLM ( auth_param ntlm program .... ) AND -NT Domain ( when I choose NT Domain in pfSense's Squid it builds a 4 or 5 lines in squid.conf begining like this auth_param basic program ...). ?? What's the difference between "ntlm" and "basic" options in squid.conf ???? My those information helping you too,or in the future, Thanks again 2011/6/23 Ermal Luçi <[email protected]<mailto:[email protected]>> On Thu, Jun 23, 2011 at 10:30 AM, Younes EL AMRAOUI <[email protected]<mailto:[email protected]>> wrote: Hi, I'm trying to set up Kerberos on my FreeBSD (command line of pfSense) to specify NTLM users of AD of Windows Server. The problem is that I don't know how to install it and configure it?Any documentation please?? You can try something like http://siphon9.net/loune/2007/10/simple-lightweight-ntlm-in-php/? It needs some adoption for pfSense(FreeBSD), Or you are looking at something completely different. Regards, -- Younes EL AMRAOUI Engineering Student at ESIREM. Computer Science Engineering School. +33629153757<tel:%2B33629153757> Dijon ,FRANCE . -- Ermal -- Younes EL AMRAOUI Engineering Student at ESIREM. Computer Science Engineering School. +33629153757 Dijon ,FRANCE .
