Re: [squid-users] squid and W2k/ActiveDirectory

Hi,

Il 16.52 21/08/2002 Bert Rapp ha scritto:
>Can you elaborate a little more on the statement: "LDAP, but without IE
>automatic authentication."?

IE automatic authentication, sometimes called "windows integrated" is based
on NTLM schema, LDAP is a basic authenticator, so when using it, the
browser always prompts for username and password.

Regards

Guido

>Thanks.
>
>Guido Serassio wrote:
>
>>Hi,
>>
>>Il 12.13 21/08/2002 Jakob Curdes ha scritto:
>>
>>>Now I have two answers.... so this means as long as we run the NT Domain
>>>services there is no significant change whereas for the native way there
>>>is no solution yet ? Is this correct ?
>>
>>
>>You can authenticate on a W2K AD domain in Native or Mixed mode in two modes:
>>
>>- NTLM, using native NT 4 emulation of AD, this works on native or mixed
>>mode, but needs Pre-Windows 2000 compatibility activated at first dcpromo
>>time. If You have any NT4 or 9x working system on Your AD, You are OK.
>>Both winbindd and old SMB auth works fine on NTLM/AD, but SMB, as says
>>Henrik is very unstable.
>>
>>-LDAP, but without IE automatic authentication.
>>
>>Regards
>>
>>Guido
>>
>>
>>>Yours, Jakob Curdes
>>>
>>>Henrik Nordstrom wrote:
>>> >
>>> > Provided your ActiveDirectory provides NT Domain services for NT
>>> clients it
>>> > should work just fine (NT Domain Services is a requirement for NTLM),
>>> but you
>>> > probably will need to use winbind and not the older (unstable) ntlm_auth
>>> > helper.
>>> >
>>> > Note: It is yet unclear how proxy authentication will work in a 100%
>>> native
>>> > MSAD environment only supporting Microsoft Kerberos login methods.
>>> >
>>> > Regards
>>> > Henrik
>>> >
>>
>>
>>
>>-
>>=======================================================
>>Serassio Guido
>>Via Albenga, 11/4 10134 - Torino -
>>ITALY
>>E-mail: guido.serassio@serassio.it
>>WWW: http://www.serassio.it
>>
>>
>

-
=======================================================
Serassio Guido
Via Albenga, 11/4 10134 - Torino - ITALY
E-mail: guido.serassio@serassio.it
WWW: http://www.serassio.it
Received on Fri Aug 23 2002 - 01:31:25 MDT