Re: [SQU] Authentication with Kerberos - WARNING

Good point. I wonder if there would be a way to authenticate to a ssl
httpd page and use that auth for squid access. If you follow my drift.

Jai.

On Wed, 3 Jan 2001, Christian Recktenwald wrote:

> On Wed, Jan 03, 2001 at 03:07:25PM +1100, Jai Lamerton wrote:
> > Hi all,
> > I was wondering if anyone has tried to get proxy authentication to
> > work with kerberos?
>
> Using Kerberos for proxy auth would circumvent kerberos'
> security as the login/password are transferred in clear text
> in HTTP. You will compromise your whole site's security.
>
> The only way around this would be using exclusively SSL/TLS to access
> the cache. I don't know if this is possible - anyone?
>
> --
> Christian Recktenwald : :
> citecs GmbH : chris at citecs dot de :
> Unternehmensberatung fuer : voice +49 711 601 2090 : Burgstallstrasse 54
> EDV und Telekommunikation : fax +49 711 601 2092 : D-70199 Stuttgart
>

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html