Squid-kerberos: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Keine Bearbeitungszusammenfassung |
Keine Bearbeitungszusammenfassung |
||
| Zeile 1: | Zeile 1: | ||
=create computeraccount and a local keytab= | |||
kinit administrator | |||
msktutil -c -b "CN=Computers" -s HTTP/dewey.xinux.org -k /etc/squid3/PROXY.keytab --computer-name PROXYSRV-HTTP --upn HTTP/dewey.xinux.org --server gondor.xinux.org --verbose | |||
=/etc/default/squid3 | |||
KRB5_KTNAME=/etc/squid3/PROXY.keytab | |||
export KRB5_KTNAME | |||
=on the top of /etc/squid3/squid.conf add = | |||
auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -d -i -s GSS_C_NO_NAME | |||
auth_param negotiate children 10 | |||
auth_param negotiate keep_alive on | |||
acl auth proxy_auth REQUIRED | |||
http_access allow all auth | |||
=sources= | |||
*http://roshan-g.blogspot.de/2014/05/squid-with-kerberos-and-ldap.html | *http://roshan-g.blogspot.de/2014/05/squid-with-kerberos-and-ldap.html | ||
*http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory | *http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory | ||
*http://stackoverflow.com/questions/18075028/squid-integration-with-active-directory-best-practise | *http://stackoverflow.com/questions/18075028/squid-integration-with-active-directory-best-practise | ||
*http://manpages.ubuntu.com/manpages/trusty/man8/negotiate_kerberos_auth.8.html | *http://manpages.ubuntu.com/manpages/trusty/man8/negotiate_kerberos_auth.8.html | ||
Version vom 17. Juli 2014, 13:02 Uhr
create computeraccount and a local keytab
kinit administrator msktutil -c -b "CN=Computers" -s HTTP/dewey.xinux.org -k /etc/squid3/PROXY.keytab --computer-name PROXYSRV-HTTP --upn HTTP/dewey.xinux.org --server gondor.xinux.org --verbose
=/etc/default/squid3
KRB5_KTNAME=/etc/squid3/PROXY.keytab export KRB5_KTNAME
on the top of /etc/squid3/squid.conf add
auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -d -i -s GSS_C_NO_NAME auth_param negotiate children 10 auth_param negotiate keep_alive on acl auth proxy_auth REQUIRED http_access allow all auth
sources
- http://roshan-g.blogspot.de/2014/05/squid-with-kerberos-and-ldap.html
- http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory
- http://stackoverflow.com/questions/18075028/squid-integration-with-active-directory-best-practise
- http://manpages.ubuntu.com/manpages/trusty/man8/negotiate_kerberos_auth.8.html