1
vote
1answer
142 views

What does squid proxy do when negating acl proxy_auth_regex in rule?

The NTLM auth helper only tags users as authorized if they are member of a AD group. The Kerberos auth helper tags a user as authorized, if he was able to log in, the group check can't be done by the ...
0
votes
0answers
225 views

HTTP proxy authentication Kerberos fallback on Windows

We run a Samba4 domain with Linux and Windows clients joined to it. Both the Windows and Linux machines use a Squid proxy that uses both Kerberos and Basic authentication, and for the most part it ...
2
votes
1answer
526 views

Why my clients send the HTTP requests before getting Kerberos tickets from KDC

I have been trying to get squid running with kerberos for a few days, but I'm in big pain. I have double checked all the configuration files they all seems OK. Here is my question, today I have ...
4
votes
1answer
2k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
1
vote
1answer
349 views

Squid Authentication & streaming

I've got squid setup using Kerberos authentication. I'm also using squidguard as an URL redirector to block out the usual nastiness of the web. There are some sites though that we allow certain users ...
2
votes
1answer
2k views

Squid Kerberos/LDAP Active Directory only works on IE not on Firefox and chrome

I've setup a proxy using squid, with kerberos/ldap as authentication. I used this article as reference: ...
4
votes
2answers
3k views

Why is squid breaking kerberos/NTLM auth?

I'm using squid 2.6.22 (Centos 5 Default) as a proxy. Squid seems to break the authentication process for web pages when they require NTLM or Kerberos Auth. I tested with sharepoint 2007 and tried all ...
1
vote
1answer
1k views

Squid/Kerberos authentication with only Linux

I would like to know if it possible to let a Windows Xp machine authenticate to Squid (Linux) using Kerberos without the need of an Active Directory domain. I only want to create a Kerberos ticket on ...
1
vote
1answer
980 views

Failure to create keytab file using msktutil on Centos to W2K8

I'm trying to setup a centos 5.5 squid server to authenticate against a windows 2008 DC. I have followed the tutorial: ...
11
votes
2answers
2k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
2
votes
1answer
3k views

Squid proxy authentication - most painless way

Ok, the title says it all, really. The end goal is to implement proxy-authentication for end users. Users' systems are mostly (95%) windows-based, the proxy is a Debian Lenny running squid 2.7. I've ...
14
votes
3answers
32k views

Getting Squid to authenticate with kerberos and Windows 2008/2003/7/XP

This is something I setup recently and was quite a big pain. My environment was getting squid to authenticate a Windows 7 client against a Windows 2008 Server invisibly. NTLM is not really an ...