Re: AW: [squid-users] Authentication with NT domain

On the wire it is sent clear-text equivalent between the browser and
the proxy.

If this worries you then you have two options (both requires
Squid-2.5)

a) Bug browser vendors to add support for SSL encrypted proxy
connections.

b) Investigate the use of other authentication schemes than Basic HTTP
authentication. Squid-2.5 also supports the standard Digest HTTP
authenticaton scheme, and the MS Proprietary NTLM over HTTP
authentication scheme.

Regards
Henrik

On Monday 03 June 2002 10:06, Rost, Werner wrote:
> After starting the IE and before first access to a website users
> are asked for username + password. Username is clear text, password
> is "*****".
>
> > Mit freundlichen Grüßen / regards
> > Werner Rost
> >
> > -----------------------------------------------------------------
> >---- ZF Boge GmbH
> > Werner Rost
> > IT
> > Friesdorfer Str. 175
> > D-53175 Bonn
> >
> >
> > phone: +49/228/3825 420
> > fax: +49/228/3825 398
> > werner.rost@zfboge.com
> >
> > www.boge-vibrationcontrol.com
> > -----------------------------------------------------------------
> >----
> >
> >
> >
> > -----Ursprüngliche Nachricht-----
> > Von: Ferris, Kieran [mailto:Kieran.Ferris@mbc.telstra.com]
> > Gesendet am: Montag, 3. Juni 2002 09:44
> > An: Rost, Werner; 'Hamed Abangar'; squid-users@squid-cache.org
> > Betreff: RE: [squid-users] Authentication with NT domain
> >
> > With SMB authentication, do your users get prompted to enter
> > their username/password? Also is the password encrypted or
> > clear-text
> >
> > -----Original Message-----
> > From: Rost, Werner [mailto:Werner.Rost@zfboge.com]
> > Sent: Monday, 3 June 2002 17:34
> > To: 'Hamed Abangar'; squid-users@squid-cache.org
> > Subject: AW: [squid-users] Authentication with NT domain
> >
> >
> > We use smb_auth (free software samba).
> >
> > 1. Install samba
> > 2. use smb_auth
> > entry in squid.conf
> >
> > authenticate_program /usr/local/bin/smb_auth -W
> > <domainname> -U <name of
> > nt-server | ip >
> >
> >
> > Mit freundlichen Grüßen / regards
> > Werner Rost
> >
> > -----------------------------------------------------------------
> >---- ZF Boge GmbH
> > Werner Rost
> > IT
> > Friesdorfer Str. 175
> > D-53175 Bonn
> >
> >
> > phone: +49/228/3825 420
> > fax: +49/228/3825 398
> > werner.rost@zfboge.com
> >
> > www.boge-vibrationcontrol.com
> > -----------------------------------------------------------------
> >----
> >
> >
> >
> > -----Ursprüngliche Nachricht-----
> > Von: Hamed Abangar [mailto:h_abangar@yahoo.com]
> > Gesendet am: Sonntag, 2. Juni 2002 14:08
> > An: squid-users@squid-cache.org
> > Betreff: [squid-users] Authentication with NT domain
> >
> >
> > Dear members..
> >
> > I have a linux box wich is running squid for cache and
> > proxy...it's not
> > transparent....my network user names and their passwords are
> > stored in a NT
> > domain.....how can i set squid to authenticat with this
> > usernames when a
> > user open his/her browser?
> >
> > thanks
> >
> > Hamed Abangar
> >
> >
> >
> >
> > _____
> >
> > Do You Yahoo!?
> > Yahoo!
> > <http://rd.yahoo.com/welcome/*http://fifaworldcup.yahoo.com> -
> > Official partner of 2002 FIFA World Cup
> >
> > ---------------------------------------------------------
> > This Mail has been checked for Viruses
> > Attention: Encrypted mails can NOT be checked!
> >
> > **
> >
> > Diese Mail wurde auf Viren geprueft
> > Hinweis: Verschluesselte mails koennen NICHT auf Viren
> > geprueft werden!
> > ---------------------------------------------------------
> >
> >
> >
> >
> > ---------------------------------------------------------
> > This Mail has been checked for Viruses
> > Attention: Encrypted mails can NOT be checked!
> >
> > **
> >
> > Diese Mail wurde auf Viren geprueft
> > Hinweis: Verschluesselte mails koennen NICHT auf Viren
> > geprueft werden!
> > ---------------------------------------------------------
> >
> >
> > ---------------------------------------------------------
> > This Mail has been checked for Viruses
> > Attention: Encrypted mails can NOT be checked!
> >
> > **
> >
> > Diese Mail wurde auf Viren geprueft
> > Hinweis: Verschluesselte mails koennen NICHT auf Viren
> > geprueft werden!
> > ---------------------------------------------------------
>
> ---------------------------------------------------------
> This Mail has been checked for Viruses
> Attention: Encrypted mails can NOT be checked!
>
> **
>
> Diese Mail wurde auf Viren geprueft
> Hinweis: Verschluesselte mails koennen NICHT auf Viren geprueft
> werden! ---------------------------------------------------------
Received on Mon Jun 03 2002 - 03:12:15 MDT