3

Squid & Kerberos: how do I get a password prompt

view full story
linux-howto

http://www.linuxforums.org – Hello, I set-up a Squid proxy server using Kerberos. The server works great for users within our domain as they are already authenticated with Kerberos, but when users outside the domain try to connected, they get an error message. Obviously, this is the intended function of Kerberos...but rather than just flat-out deny users who aren't authenticated with an error message, I'd like Squid to ask for a password and username--is this possible, and how do I go about doing it? I have made the following modifications to my squid.conf file to get Kerberos to work (as well as include the keytab file in the start-up script): auth_param negotiate program /usr/local/squid/libexec/squid_kerb_auth -d auth_param negotiate children 10 auth_param negotiate keep_alive on acl auth proxy_auth REQUIRED http_access allow auth http_access deny all (HowTos)