Squid Single Sign on Authentication with kerberos

[d.maltby]

HI,

Firstly thanks for reading.

I’ve just setup a squid server on a 10.5 server and it works perfectly using the squid_ldap_auth module. I can authenticate against our 10.6 Open Directory server with no problems and can even block users form internet access etc.

So since every user has to login to a machine I thought it would make more sense to use the kerberos ticket they already have.

Unfortunately I’ve hit a brick wall….hard. I can find no documentation on the web (apart from Active Directory integration) about setting up Squid to use the squid_kerb_auth with OS X kerberos.

I know very little about kerberos but from what I understand I need to create a principal for my server running squid and then export a local keytab file for squid to be able to access the KDC’s password store.

Any help would be greatly appreciated as I could do with this setup as soon as possible really.

Thanks

Dave Maltby

[Author]

Posts