Re: squid as a local proxy for kerberos authentication
Christoph Mathys <[email protected]> Thu, 26 Mar 2026 14:34:31 +0100
| Newsgroups | gmane.comp.web.squid.general |
|---|---|
| Message-ID | <CALqGcGo3Cxg8CV91OnsD4RDFg29+TQ-tbWc460BA6g43yUZ8qQ@mail.gmail.com> |
SGVsbG8gQWxleCwKClRoYW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHlvdXIgcmVwbHkhCgpPbiBXZWQs IE1hciA0LCAyMDI2IGF0IDc6MzLigK9QTSBBbGV4IFJvdXNza292Cjxyb3Vzc2tvdkBtZWFzdXJl bWVudC1mYWN0b3J5LmNvbT4gd3JvdGU6Cj4KPiBPbiAyMDI2LTAzLTA0IDEwOjAxLCBDaHJpc3Rv cGggTWF0aHlzIHdyb3RlOgo+ID4gSSd2ZSBub3RpY2VkIHRoYXQgU3F1aWQgZG9lc24ndCBoYW5k bGUgc2l0dWF0aW9ucyB3ZWxsIHdoZW4gaXQgY2Fubm90Cj4gPiByZXNvbHZlIG9yIGNvbm5lY3Qg dG8gY2FjaGVfcGVlcnMuCj4KPiBQbGVhc2Ugbm90ZSB0aGF0IHdlIGRvIG5vdCBrbm93IGhvdyB5 b3UgZGVmaW5lICJ3ZWxsIiBpbiB0aGlzIGNvbnRleHQuCgpTdXJlLiBNeSBnb2FsIGlzIHRoYXQg dGhlIHVzZXIgZG9lcyBub3QgbmVlZCB0byByZXN0YXJ0IHNxdWlkIGR1ZSB0bwpuZXR3b3JrIGNo YW5nZXMuIEl0cyBPSyB0byBnZXQgNTAwIG9yIHdoYXRldmVyIHdoZW4gbm8gY2FjaGVfcGVlcnMg YXJlCmF2YWlsYWJsZSBvciB3aGlsZSBzcXVpZCBpcyBwcm9iaW5nIHBlZXJzLiBCdXQgaXQgc2hv dWxkICJzZWxmLWhlYWwiCndpdGhpbiBzZWNvbmRzIGFmdGVyIHJlY2VpdmluZyBhIHJlcXVlc3Qg aWYgcG9zc2libGUuCgo+IFRoZSBkZXZpbCBpcyBpbiB0aGUgZGV0YWlscy4gSW4gdGhpcyBjYXNl LCBJIHN1c3BlY3QgdGhhdCBhdCBsZWFzdCB0d28KPiBkZXRhaWxzIGFyZSByZWxldmFudDoKPgo+ IDEuIEl0IGlzIGltcG9ydGFudCB0byBkaXN0aW5ndWlzaCAiU3F1aWQgc3RhcnRzIHRyeWluZyB0 byBjb25uZWN0IiBmcm9tCj4gIlNxdWlkIGZpbmlzaGVzIHRyeWluZyB0byBjb25uZWN0Ii4gU3F1 aWQgZG9lcyBub3Qgc3VwcG9ydCBtdWx0aXBsZQo+IF9jb25jdXJyZW50XyBjYWNoZV9wZWVyIHBy b2Jlcy4gSWYgYSBjYWNoZV9wZWVyIHByb2JlIHRha2VzLCBzYXksIDMwCj4gc2Vjb25kcywgdGhl IHBlZXIgd2lsbCBiZSB0cmVhdGVkIGFzIGRlYWQgZm9yIHRob3NlIDMwIHNlY29uZHMuIFJvdWdo bHkKPiBzcGVha2luZywgYW5vdGhlciBwcm9iZSB3aWxsIGJlIHN0YXJ0ZWQgd2hlbi9pZiB0aGVy ZSBpcyBhbm90aGVyCj4gcG90ZW50aWFsIG5lZWQgZm9yIHRoYXQgY2FjaGVfcGVlciBhZnRlciB0 aGUgY3VycmVudCBwcm9iZSBmaW5pc2hlcy4KPgo+IDIuIFByb2JlcyB0aGF0IGNhbiBtYXJrIGEg Y2FjaGVfcGVlciBhcyAiYWxpdmUiIGFyZSBub3QgYSBwYXJ0IG9mIGEKPiByZWd1bGFyIEhUVFAg dHJhbnNhY3Rpb24uIFRoZXkgYXJlIHRyaWdnZXJlZCBieSByZWd1bGFyIHRyYW5zYWN0aW9ucyBh bmQKPiAocmUpY29uZmlndXJhdGlvbnMsIGJ1dCByZWd1bGFyIHRyYW5zYWN0aW9ucyBkbyBub3Qg X3dhaXRfIGZvciBwcm9iZXMgdG8KPiBmaW5pc2ggYW5kIGRvIG5vdCByZXVzZSBwcm9iZSBjb25u ZWN0aW9ucy4gUHJvYmluZyBpcyBhICJiYWNrZ3JvdW5kIgo+IGFjdGl2aXR5LgoKVGhhdCBzb3Vu ZCBwcmV0dHkgcmVhc29uYWJsZS4gQ2FuIEkgdHdlYWsgdGhlIDMwcyB0aW1lb3V0PyBPciBoYXZl CmNvbmN1cnJlbnQgcHJvYmVzIHJ1biBzbyB0aGF0IGxhdGVyIHJlcXVlc3RzIGFsc28gaW1tZWRp YXRlbHkgdHJpZ2dlcgphIHByb2JlPwoKSSBvYnNlcnZlIHRoZSBmb2xsb3dpbmcgb24gTWFjIE9T OgoKTWFjIE9TIGRvZXMgbm90IHNlZW0gdG8gc2xlZXAgaW4gdGhlIHNhbWUgd2F5IHRoYXQgYW4g QUNQSQpTdXNwZW5kLXRvLVJBTSBzbGVlcHM6IEkgc2VlIGNvbnN0YW50IGFjdGl2aXR5IHdoZW4g SSB0aGluayBpdCBzaG91bGQKYmUgc2xlZXBpbmcuIFRoZSBWUE4gY29ubmVjdGlvbiBkcm9wcyBh dCBzb21lIHBvaW50IGR1cmluZyBzbGVlcCBvciBpcwpldmVuIGRpcmVjdGx5IHRlcm1pbmF0ZWQg d2hlbiB0aGUgTWFjIGVudGVycyBzbGVlcC4gU3F1aWQgYW5kCmFwcGxpY2F0aW9ucyBjb250aW51 ZSB0byBydW4gYW5kIGdlbmVyYXRlIGxvZyBtZXNzYWdlcy4KCk15IGxvZyBjb250YWlucyBtZXNz YWdlcyBsaWtlIHRoZSBmb2xsb3dpbmcgYWJvdXQgZXZlcnkgaG91cjoKCjIwMjYvMDMvMjYgMDQ6 MjQ6MzV8IFdBUk5JTkc6IEROUyBsb29rdXAgZm9yICdwcm94eTQuZXhhbXBsZS5jb20nIGZhaWxl ZCEKICAgIGN1cnJlbnQgY2FjaGVfcGVlciBwcm9iZTogcHJveHk0LmV4YW1wbGUuY29tCjIwMjYv MDMvMjYgMDQ6NTE6NTB8IGNvbW1fdWRwX3NlbmR0byBGRCAxMCwgKGZhbWlseT0yKQoxNzIuMzEu NTguMTM6NTM6ICg1MSkgTmV0d29yayBpcyB1bnJlYWNoYWJsZQogICAgY3VycmVudCBtYXN0ZXIg dHJhbnNhY3Rpb246IG1hc3RlcjEyMDMKMjAyNi8wMy8yNiAwNDo1MTo1MHwgaWRuc1NlbmRRdWVy eSBGRCAxMDogc2VuZHRvOiAoNTEpIE5ldHdvcmsgaXMgdW5yZWFjaGFibGUKICAgIGN1cnJlbnQg bWFzdGVyIHRyYW5zYWN0aW9uOiBtYXN0ZXIxMjAzCgpJbiB0aGUgbW9ybmluZyBpdCBuZWVkIHRv IHJlc3RhcnQgc3F1aWQgYmVjYXVzZSBpdCBzZWVtcyB0aGF0IG5vdApiZWluZyBhYmxlIHRvIHJl c29sdmUgY2FjaGVfcGVlciBpcyBhIGJpdCBvZiBhIHJlZCBmbGFnLgoKVGhlIHNhbWUgcHJvYmxl bSBjYW4gaGFwcGVuIHdoZW4gSSBjbG9zZSB0aGUgTGFwdG9wLCBkcm9wcGluZyBWUE4KdGhyb3Vn aCBtb2JpbGUsIGFuZCB0aGVuIHJlc3VtZSB3b3JraW5nIGluc2lkZSB0aGUgb2ZmaWNlIHdpdGhv dXQgVlBOLgoKPiBHb2luZyBmb3J3YXJkLCBJIHNlZSBzZXZlcmFsIHBhdGhzOgo+Cj4gQTogQ29u ZmlndXJlIHVzZXIgZGV2aWNlcyB0byBzdGFydCBTcXVpZCBfYWZ0ZXJfIHRoZSB1c2VyIGVzdGFi bGlzaGVzICJhCj4gVlBOIGNvbm5lY3Rpb24gdG8gdGhlIGNvcnBvcmF0ZSBuZXR3b3JrIi4gSSBk byBub3Qga25vdyB3aGV0aGVyIHRoYXQgaXMKPiBwb3NzaWJsZSBpbiB5b3VyIGVudmlyb25tZW50 LCBidXQsIGlmIGl0IGlzLCBpdCB3b3VsZCBiZSBhIHJlbGF0aXZlbHkKPiBjbGVhbiBzb2x1dGlv biB0aGF0IGRvZXMgbm90IHJlcXVpcmUgU3F1aWQgZGV2ZWxvcG1lbnQuCgpJIGN1cnJlbnRseSBk ZWxheSBzdGFydGluZyBzcXVpZCB1bnRpbCBJIGNhbiByZXNvbHZlIGEgY2FjaGVfcGVlci4KVGhp cyBpcyBvbmx5IGVmZmVjdGl2ZSBkdXJpbmcgYm9vdC4gQW5kIG9mIGNvdXJzZSwgdGhlIHVzZXIg ZG9lcyBub3QKYWx3YXlzIHVzZSBWUE4sIGJ1dCBjYW4gYWxzbyBjb25uZWN0IGRpcmVjdGx5IHRv IHRoZSBjb3Jwb3JhdGUgV2lGaQp3aGVuIGF0IHRoZSBvZmZpY2UuIFNvIEkgdGhpbmsgaXQgaXMg YSBiaXQgbWVzc3kgdG8gdHJ5IHRvIHN0YXJ0IGFuZApzdG9wIHNxdWlkIGF0IHRoZSByaWdodCB0 aW1lLgoKPiBCOiBBZGQgYSBjYWNoZV9wZWVyICJhZ2dyZXNzaXZlLXByb2JlcyIgb3B0aW9uIHRv IHJlLXByb2JlIGEgc3RpbGwtREVBRAo+IHBlZXIgd2l0aG91dCB3YWl0aW5nIGZvciBhbiBIVFRQ IHJlcXVlc3QgdGhhdCBtYXkgdXNlIHRoYXQgcGVlci4gVGhpcwo+IHNob3VsZCBiZSBhIGZhaXJs eSBzdHJhaWdodGZvcndhcmQgZGV2ZWxvcG1lbnQgcHJvamVjdC4gVGhpcyB3aWxsIG5vdAo+IHNv bHZlIGFsbCB0aGUgcHJvYmxlbXNbXkIyXSwgYnV0IGl0IHNob3VsZCBoZWxwIGEgbG90LgoKSSBh bHJlYWR5IGhlYXIgdGhlIHVzZXJzIGNvbXBsYWluaW5nIGFib3V0IGJhdHRlcnkgZHJhaW4uIEkg dGhpbmsKdHJpZ2dlcmluZyBwcm9iaW5nIHVzaW5nIGEgcmVxdWVzdCBpcyBnb29kIGVub3VnaCBp biB0aGlzIGNhc2UuCgo+IEM6IElmIHlvdSByZWFsbHkgd2FudCBTcXVpZCB0byBfc3RhbGwvcGF1 c2VfIGFuIGluY29taW5nIEhUVFAgcmVxdWVzdAo+IHVudGlsIGF0IGxlYXN0IG9uZSBlbGlnaWJs ZSBjYWNoZV9wZWVyIGlzIGF2YWlsYWJsZSwgdGhlbiB5b3Ugd2lsbCBuZWVkCj4gdG8gd3JpdGUg cXVpdGUgYSBiaXQgb2YgY29tcGxpY2F0ZWQgY29kZSAoQUZBSUNUKSB0aGF0IHdvdWxkIGJlCj4g ZGlmZmljdWx0IHRvIG1ha2Ugb2ZmaWNpYWwuIFRoZSBpZGVhIGp1c3QgZ29lcyBhZ2FpbnN0IGhv dyBTcXVpZCBwZWVyCj4gc2VsZWN0aW9uIGNvZGUgaXMgc3RydWN0dXJlZC9kZXNpZ25lZC4gSSBk byBub3QgcmVjb21tZW5kIHRoaXMgcGF0aC4KCkkgZG9uJ3QgdGhpbmsgYW55dGhpbmcgdGhhdCBk cmFzdGljIGlzIHJlcXVpcmVkLiBSZXF1ZXN0cyBjYW4ganVzdApmYWlsIHVudGlsIHNob3J0bHkg YWZ0ZXIgdGhlIFZQTiBpcyBjb25uZWN0ZWQgKG1heWJlIDUtMTBzPykuCgpBZ2FpbiwgdGhhbmsg eW91IHZlcnkgbXVjaCBmb3IgdGFraW5nIHRoZSB0aW1lIQoKQ2hyaXN0b3BoCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCnNxdWlkLXVzZXJzIG1haWxpbmcg bGlzdApzcXVpZC11c2Vyc0BsaXN0cy5zcXVpZC1jYWNoZS5vcmcKaHR0cHM6Ly9saXN0cy5zcXVp ZC1jYWNoZS5vcmcvbGlzdGluZm8vc3F1aWQtdXNlcnMK