Re: [squid-users] Kerberos / SASL for squid_ldap_group

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 03 Sep 2010 02:21:57 +1200

Nick Cairncross wrote:
>> On Mon, 30 Aug 2010 16:32:51 +0200, Maxim Burgerhout <maxim_at_wzzrd.com>
>> wrote:
>>> Of course I just bumped into that little gem *after* I sent the
>>> previous message to this list...
>>>
>>> It has the downside of not being included in, or supported by
>>> downstream distro's though. The major upside of having Kerberos
>>> support in Squid's ldap_group helper would be the fact that downstream
>>> distro's (the Red Hats, Canonicals and Novells of this world) would be
>>> more likely to support it. But I just checked out the squidkerbldap
>>> project, and it seems to work ok. The fact it handles the Kerberos
>>> cache in memory is especially nice.
>> ... yet. Markus submitted it for bundling and its just passed our upstream
>> QA. It hit Squid-3.2 beta bundles under the name
>> ext_kerberos_ldap_group_acl as of a few days ago. Along with a lot of
>> Kerberos support in other auth-related areas of Squid and associated tools.
>>
>> Amos
>
> Amos,
>
> Re: 3.2
>
> Does this means an NTLM and Kerberos authentication helper wrapped in one..? So no need for two helpers..?

http://www.squid-cache.org/Versions/v3/3.2/manuals/ext_kerberos_ldap_group_acl

That pretty much all I know about it beyond how it used the Squid plugin
helper API.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.7
   Beta testers wanted for 3.2.0.1
Received on Thu Sep 02 2010 - 14:22:08 MDT

This archive was generated by hypermail 2.2.0 : Thu Sep 02 2010 - 12:00:02 MDT