Re: [SQU] FrontPage 2000

Thanks kinkie,
yes that's what I meant. Hendrik - I didn't know about that bug.

so the canonical auth-thru-squid-to-origin-server answer should be
* Basic ok any version of squid
* Digest recent versions only, possibly requires 2.4 (not stable yet)
* NTLM (integrated windows authentication) won't work due to NTLM design
limitations. No RFC 2616 compliant proxy can do this.

Rob
----- Original Message -----
From: "Chemolli Francesco (USI)" <ChemolliF@GruppoCredit.it>
To: "'Henrik Nordstrom'" <hno@hem.passagen.se>; "Robert Collins"
<robert.collins@itdomain.com.au>
Cc: "khess" <khess@marxware.com>; <squid-users@ircache.net>
Sent: Friday, August 25, 2000 6:29 PM
Subject: RE: [SQU] FrontPage 2000

> > Robert Collins wrote:
> > >
> > > Digest authentication should go via squid with no problems.
> > > NTLM certainly won't. (see the squid FAQ).
> >
> > Well.. there has been HTTP header bugs which prevents most digest
> > authentication. Not sure which version it got fixed in
> > (either some 2.3
> > release or 2.4). The bug was that Squid failed to deal with multiline
> > HTTP headers.
>
> I believe that what Robert meant is that NTLM authentication
> won't work through a proxy by design, since it relies
> on connection-based state. Digest authentication
> doesn't have such gross misdesigns.
>
> --
> /kinkie
>

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html