--------------------- PatchSet 7462 Date: 2006/03/19 16:59:51 Author: serassio Branch: negotiate-nt-2_5 Tag: (none) Log: Added missing readme.txt Members: helpers/negotiate_auth/Win32/readme.txt:1.1->1.1.2.1 --- /dev/null Wed Feb 14 01:14:08 2007 +++ squid/helpers/negotiate_auth/Win32/readme.txt Wed Feb 14 01:14:15 2007 @@ -0,0 +1,41 @@ +win32_negotiate_auth.exe + +Native Windows Negotiate authenticator for Squid. + +===== +Usage +===== + +win32_negotiate_auth [-d] [-v] [-h] + +-d enables debugging. +-v enables verbose Negotiate packet debugging. +-h print program usage + +This is released under the GNU General Public License + +============== +Allowing Users +============== + +Users that are allowed to access the web proxy must have the Windows NT +User Rights "logon from the network". + +Squid.conf typical minimal required changes: + +auth_param negotiate program c:/squid/libexec/win32_negotiate_auth.exe +auth_param negotiate children 5 + +acl password proxy_auth REQUIRED + +http_access allow password +http_access deny all + +Refer to Squid documentation for more details. + +Currently Internet Explorer has some problems with ftp:// URLs when handling +internal Squid FTP icons. The following squid.conf ACL works around this: + +acl internal_icons urlpath_regex -i /squid-internal-static/icons/ + +http_access allow our_networks internal_icons <== BEFORE authentication ACL !!!