src/auth/negotiate/SSPI/negotiate_sspi_auth.8

   1 .if !'po4a'hide' .TH negotiate_sspi_auth.exe 8
   2 .
   3 .SH NAME
   4 .if !'po4a'hide' .B negotiate_sspi_auth.exe
   5 .if !'po4a'hide' \-
   6 Windows SSPI Negotiate authentication helper.
   7 .
   8 .SH SYNOPSIS
   9 .if !'po4a'hide' .B negotiate_sspi_auth.exe
  10 .if !'po4a'hide' .B [\-dhv]
  11 .
  12 .SH DESCRIPTION
  13 .B negotiate_sspi_auth.exe
  14 is an installed binary. Uses the Windows SSPI interface to perform Negotiate authentication.
  15 .
  16 .SH OPTIONS
  17 .if !'po4a'hide' .TP 12
  18 .if !'po4a'hide' .B \-d
  19 Write debug info to stderr.
  20 .
  21 .if !'po4a'hide' .TP
  22 .if !'po4a'hide' .B \-h
  23 Display the binary help and command line syntax info using stderr.
  24 .
  25 .
  26 .if !'po4a'hide' .TP
  27 .if !'po4a'hide' .B \-v
  28 Display verbose Negotiate packet debugging.
  29 .
  30 .SH CONFIGURATION
  31 .PP
  32 Users that are allowed to access the web proxy must have the Windows NT
  33 User Rights "logon from the network".
  34 .
  35 .PP
  36 .B squid.conf
  37 typical minimal required changes:
  38 .if !'po4a'hide' .RS
  39 .if !'po4a'hide' .B auth_param negotiate program c:/squid/libexec/mswin_negotiate_auth.exe
  40 .if !'po4a'hide' .br
  41 .if !'po4a'hide' .B auth_param negotiate children 5
  42 .if !'po4a'hide' .br
  43 .if !'po4a'hide' .B acl password proxy_auth REQUIRED
  44 .if !'po4a'hide' .br
  45 .if !'po4a'hide' .B http_access deny !password
  46 .if !'po4a'hide' .br
  47 .if !'po4a'hide' .B http_access allow password
  48 .if !'po4a'hide' .RE
  49 .
  50 .PP
  51 Refer to Squid documentation for more details.
  52 .
  53 .PP
  54 Currently Internet Explorer has some problems with ftp:// URLs when handling
  55 internal Squid FTP icons. The following
  56 .B squid.conf
  57 ACL defined before authentication ACLs works around this:
  58 .if !'po4a'hide' .RS
  59 .if !'po4a'hide' .B acl internal_icons urlpath_regex -i /squid-internal-static/icons/
  60 .if !'po4a'hide' .br
  61 .if !'po4a'hide' .B http_access allow our_networks internal_icons
  62 .if !'po4a'hide' .RE
  63 .
  64 .SH AUTHOR
  65 This program was written by
  66 .if !'po4a'hide' .I Guido Serassio <guido.serassio@acmeconsulting.it>
  67 .if !'po4a'hide' Acme Consulting S.r.l., Italy <http://www.acmeconsulting.it>
  68 .
  69 .PP
  70 Based on prior work of
  71 .if !'po4a'hide' .I Francesco Chemolli <kinkie@squid-cache.org>,
  72 .if !'po4a'hide' .I Robert Collins <lifeless@squid-cache.org>
  73 .
  74 .SH COPYRIGHT
  75 .PP
  76  * Copyright (C) 1996-2021 The Squid Software Foundation and contributors
  77  *
  78  * Squid software is distributed under GPLv2+ license and includes
  79  * contributions from numerous individuals and organizations.
  80  * Please see the COPYING and CONTRIBUTORS files for details.
  81 .PP
  82 This program and documentation is copyright to the authors named above.
  83 .PP
  84 Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+).
  85 .
  86 .SH QUESTIONS
  87 Questions on the usage of this program can be sent to the
  88 .I Squid Users mailing list
  89 .if !'po4a'hide' <squid-users@lists.squid-cache.org>
  90 .
  91 .SH REPORTING BUGS
  92 Bug reports need to be made in English.
  93 See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report.
  94 .PP
  95 Report bugs or bug fixes using http://bugs.squid-cache.org/
  96 .PP
  97 Report serious security bugs to
  98 .I Squid Bugs <squid-bugs@lists.squid-cache.org>
  99 .PP
 100 Report ideas for new improvements to the
 101 .I Squid Developers mailing list
 102 .if !'po4a'hide' <squid-dev@lists.squid-cache.org>
 103 .
 104 .SH SEE ALSO
 105 .if !'po4a'hide' .BR squid "(8), "
 106 .if !'po4a'hide' .BR GPL "(7), "
 107 .br
 108 The Squid FAQ wiki
 109 .if !'po4a'hide' http://wiki.squid-cache.org/SquidFaq
 110 .br
 111 The Squid Configuration Manual
 112 .if !'po4a'hide' http://www.squid-cache.org/Doc/config/