---------------------
PatchSet 2025 
Date: 2005/10/30 19:45:16
Author: serassio
Branch: nt
Tag: (none) 
Log:
Added readme to negotiate helper

Members: 
	helpers/negotiate_auth/mswin_sspi/readme.txt:1.1->1.1.2.1 

--- /dev/null	Wed Feb 14 13:33:00 2007
+++ squid3/helpers/negotiate_auth/mswin_sspi/readme.txt	Wed Feb 14 13:35:27 2007
@@ -0,0 +1,49 @@
+mswin_negotiate_auth.exe
+
+Native Windows Negotiate authenticator for Squid.
+
+=====
+Usage
+=====
+
+mswin_negotiate_auth [-d] [-v] [-h]
+
+-d enables debugging.
+-v enables verbose Negotiate packet debugging.
+-h print program usage
+
+This is released under the GNU General Public License
+
+==============
+Allowing Users
+==============
+
+Users that are allowed to access the web proxy must have the Windows NT
+User Rights "logon from the network".
+
+Squid.conf typical minimal required changes:
+
+auth_param negotiate program c:/squid/libexec/mswin_negotiate_auth.exe
+auth_param negotiate children 5
+
+acl password proxy_auth REQUIRED
+
+http_access allow password
+http_access deny all
+
+Refer to Squid documentation for more details.
+
+Currently Internet Explorer has some problems with ftp:// URLs when handling
+internal Squid FTP icons. The following squid.conf ACL works around this:
+
+acl internal_icons urlpath_regex -i /squid-internal-static/icons/
+
+http_access allow our_networks internal_icons <== BEFORE authentication ACL !!!
+
+
+===============
+Contact details
+===============
+
+To contact the maintainer of this package, e-mail on squidnt@acmeconsulting.it.
+The latest version may be found on http://www.acmeconsulting.it/SquidNT.htm.