Re: squid as a local proxy for kerberos authentication

Alex Rousskov <[email protected]> Mon, 13 Apr 2026 16:02:36 -0400
Newsgroups gmane.comp.web.squid.general
Message-ID <[email protected]>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