Open task: SPNEGO authentication

Here is a interesting task for Windows authentication freaks:

Now that Samba supports SPNEGO it is about time we start adding support
for this to Squid. As far as Squid is concerned the principles of SPNEGO
is pretty much the same as NTLM, the difference is mainly in the helper
who parses and generates the SPNEGO blobs..

The SPNEGO over HTTP protocol is simply

1. Unauthenticated message.

2. Server responds with authentication methods supported

3. Client sends NEGOTIATE base_64_encoded_blob

4. Server responds with NEGOTIATE base_64_encoded_blob

3,4 repeats until helper says authentication successful or failure.

Regards
Henrik
Received on Thu Feb 12 2004 - 16:54:53 MST