Hi Henrik,
At 14.52 11/02/2006, Henrik Nordstrom wrote:
Negotiate (GSSAPI / Kerberos):
> + Microsoft "standard" and future direction
> + Single-sign-on in Windows environments
> + Not plauged by the huge overhead of NTLM authentication
>
> - Not supported in Squid-2.5 (patch available)
> - Not supported in Samba-3.x (Samba-4 development snapshots
> reportedly works..)
> - Not well supported by other browsers than MSIE.
A little correction:
Currently the only released browser supporting Negotiate for proxy
authentication is FireFox 1.5, but just today I have verified that
the new Beta 2 of Internet Explorer 7 is working fine with Squid
(2.5.STABLE12-NEGOTIATE-NT branch) using Negotiate.
> - Not even MSIE supports it to proxies (only web servers/accelerators)
> - Not following HTTP standard (same design fault as NTLM)
Regards
Guido
-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Sat Feb 11 2006 - 07:53:52 MST
This archive was generated by hypermail pre-2.1.9 : Wed Mar 01 2006 - 12:00:03 MST