ldapv3.pdf 7947KB Apr 17 2013 11:30:42 AM - mirror omadata

Authentication Schemes
--enable-basic-auth-helpers=LDAP,NCSA,PAM,SMB \
--enable-ntlm-auth-helpers=SMB \
--enable-auth="ntlm basic"
Build with support for both basic
and NTLM authentication schemes.
Squid supports various schemes for authenticating requests, this enables
control of access on a per user basis. The set of schemes supported is
determined when squid is compiled; see the ./configure for the full set of
options.
The proxy and the client browser will automatically negotiate for the
strongest level of authentication support mutually supported.
If compiled like the above example, NTLM will be used if supported, and the
proxy will fall back to basic (user is prompted for username and password)
authentication if NTLM is not supported. NTLM uses a challenge response
mechanism based on the user's domain credentials thus avoiding an additional
username/password prompt.