Re: [squid-users] generic kerberos support in 2.6?

From: Brian J. Murrell <brian@dont-contact.us>
Date: Mon, 18 Dec 2006 23:41:29 -0500

On Tue, 2006-12-19 at 12:14 +0800, Adrian Chadd wrote:
> On Mon, Dec 18, 2006, Brian J. Murrell wrote:
> >
> > This is probably staring to grow a little OT for this list though.
>
> Nope, its definitely not off-topic for the list.

I think I just meant the discussion on "how to make firefox on linux do
spnego" bits as being OT. Maybe that is not even OT. Seemed it to me,
but I am just a newcomer though.

> I think we'd all agree that being able to offer digest

digest or Negotiate?

> authentication in this
> method to non-Windows platforms would be rather shiny.

Indeed. And it can be done, I think, by adding native KRB5 support to
ntlm_auth (right now ntlm_auth assumes everything will be wrapped in
SPNEGO), but it would be less hacking there if Firefox could be
convinced to use SPNEGO on non-windows platform, even when all it has
are KRB5 (or any other non MS specific) credentials.

b.

-- 
My other computer is your Microsoft Windows server.
Brian J. Murrell

Received on Mon Dec 18 2006 - 21:41:35 MST

This archive was generated by hypermail pre-2.1.9 : Mon Jan 01 2007 - 12:00:01 MST