Re: [squid-users] kerberos authentication with kerberos groups

2018-02-24 Thread Markus Moeller
p.cc(416): pid=2951 :2018/02/20 17:02:27| kerberos_ldap_group: DEBUG: ERR -Oorspronkelijk bericht- Van: Jeroen Ruijter Verzonden: maandag 19 februari 2018 11:19 Aan: 'Amos Jeffries'; squid-users@lists.squid-cache.org Onderwerp: RE: [squid-users] kerberos authentication with kerberos groups

Re: [squid-users] kerberos authentication with kerberos groups

2018-02-20 Thread Jeroen Ruijter
maandag 19 februari 2018 11:19 Aan: 'Amos Jeffries'; squid-users@lists.squid-cache.org Onderwerp: RE: [squid-users] kerberos authentication with kerberos groups Do you advise to use capitals or small characters for the domain name? -Oorspronkelijk bericht- Van: squid-users

Re: [squid-users] kerberos authentication with kerberos groups

2018-02-19 Thread Jeroen Ruijter
-users] kerberos authentication with kerberos groups On 17/02/18 02:02, Jeroen Ruijter wrote: > I'm trying to replace my basic ldap authentication by kerberos single > sign on. > NP: Despite what some claim, SSO is not unique to NTLM and Kerberos authentication. It is a behaviou

Re: [squid-users] kerberos authentication with kerberos groups

2018-02-19 Thread Jeroen Ruijter
as=x86_64-suse-linux-gnu' 'host_alias=x86_64-suse-linux-gnu' 'CFLAGS=-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -fPIE -fPIC -DOPENSSL_LOAD_CONF' 'LDFLAGS=-Wl,--as-needed -Wl,--no-undefined

Re: [squid-users] kerberos authentication with kerberos groups

2018-02-16 Thread Amos Jeffries
On 17/02/18 02:02, Jeroen Ruijter wrote: > I'm trying to replace my basic ldap authentication by kerberos single > sign on. > NP: Despite what some claim, SSO is not unique to NTLM and Kerberos authentication. It is a behaviour of the tools used. As such it can be done with *any* authentication t

[squid-users] kerberos authentication with kerberos groups

2018-02-16 Thread Jeroen Ruijter
I'm trying to replace my basic ldap authentication by kerberos single sign on. The user can succesfully login with single sign on, but I have restriction on groups and that is where it goes wrong. I would like to use -r to trim the domain name, but when I do so it seems to work even less. Someone