On Tue, 4 Nov 2003, Lombardo Federico wrote:
> So It means that every group lookups need an helper that gives him
> credential ?
> I was wondering if groups helpers need someone gives them credential!
Group helpers need the login name.
For Squid to know the login name the browser needs to give login
credentials using the configured authentication scheme
(basic/ntlm/digest).
For Squid to verify the login credentials it needs a authentication helper
(auth_param ... program ...), one per authentication scheme.
> As wrote in previus mail, without any other auth helper, wbinfo_group cannot
> realize who's asking service!
Yes, and this is because wbinfo_group is a authorization helper, not a
authentication helper.
authentication must take place first for authorization to be possible.
> Is true what I'm saying, or wbinfo_group is able to realize credential
> without any other helper and, so I've a wrong configuration ?
wbinfo_group can not know who the user is without at least one
authentication scheme configured.
each configured authentication scheme requires a authentication helper.
authentication schemes are configured via the auth_param directive.
Regards
Henrik
Received on Tue Nov 04 2003 - 10:29:53 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:21:05 MST