[squid-users] Re: Two authentication helpers in one instance

Hi Rafael,

  squid_kerb_auth can not handle basic authentication. You need an auth
handle which can use the username/password from basic authentication. It is
not a good idea to use the domain username/password with basic auth and not
SSL encryption.

 Does skype or your other clients work with NTLM or Negotiate/NTLM ?

Markus

"Rafal Zawierta" <zawierta_at_gmail.com> wrote in message
news:CAPXtaS-_RkMHi8Sz88TD8nqp_QESVk8_8HR_tAOERSFaFktzwQ_at_mail.gmail.com...
> OK, now it's clear for me (that the browser will choose method).
>
> But now I should enable fallback method to my negotiate
> squid_kerb_auth, becaouse Skype and other stuff won't work with
> negotiate helper.
>
> Can I use squid_kerb_auth both in negotiate and in basic mode? If
> browser is ok (IE8, IE9, FF, Chrome) - negotiate will fork fine. Else
> - basic auth.
>
> auth_param negotiate program /usr/lib/squid3/squid_kerb_auth
> auth_param negotiate children 5
> auth_param negotiate keep_alive on
>
> auth_param basic program /usr/lib/squid3/squid_kerb_auth
> auth_param basic children 5
> auth_param basic keep_alive on
>
> Regards
>
Received on Fri Sep 30 2011 - 17:42:57 MDT