[ ipcop-Feature Requests-3611206 ] Add support for kerberos authentication to proxy server

SourceForge.net <[email protected]> Wed, 17 Apr 2013 07:50:39 -0700
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <[email protected]>
Feature Requests item #3611206, was opened at 2013-04-17 07:50
Message generated for change (Tracker Item Submitted) made by 
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=3611206&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Edolon ()
Assigned to: Nobody/Anonymous (nobody)
Summary: Add support for kerberos authentication to proxy server

Initial Comment:
Adding support for squid to use kerberos authentication would help increase security when wanting to use Windows integrated (transparent) authentication.
Currently only LM/NTLM authentication is supported for Windows integrated (transparent) authentication.
The problem with the above is on windows vista/2008 and higher only NTLMv2 responses are supported by default
(Microsoft has disabled LM & NTLM responses to increase domain security)

currently the squid auth helper squid_kerb_auth and negotiate_kerb_auth are installed but the libraries libkrb5support.so.0 is missing, so they can not be used.
At minimum can the libraries to be able to run squid_kerb_auth and negotiate_kerb_auth be included, so it can be configured manually though ssh?
and work on adding web GUI  support in the future after that.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=3611206&group_id=40604

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter