1 .if !'po4a'hide' .TH basic_sspi_auth.exe 8
4 basic_sspi_auth.exe \- Basic authentication protocol
9 .if !'po4a'hide' .B basic_sspi_auth.exe
10 .if !'po4a'hide' .B "[\-d] [\-A "
12 .if !'po4a'hide' .B "] [\-D "
14 .if !'po4a'hide' .B "] [\-O "
16 .if !'po4a'hide' .B "]"
19 .B basic_sspi_auth.exe
20 is a simple authentication module for the Squid proxy server running on Windows NT
21 to authenticate users on an NT domain in native WIN32 mode.
24 Usage is simple. It accepts a username and password on standard input
27 if the username/password is valid for the domain/machine, or
29 if there was some problem. It is possible to authenticate against NT trusted domains specifying the username
30 in the domain\\username Microsoft notation.
33 .if !'po4a'hide' .TP 12
34 .if !'po4a'hide' .B \-A
35 A Windows Local Group name allowed to authenticate.
38 .if !'po4a'hide' .B \-d
39 Write debug info to stderr.
42 .if !'po4a'hide' .B \-D
43 A Windows Local Group name not allowed to authenticate.
46 .if !'po4a'hide' .B \-O
47 The default Domain against to authenticate.
51 Users that are allowed to access the web proxy must have the Windows NT
53 .I "\"logon from the network\""
54 and must be included in the NT LOCAL User Groups specified in the Authenticator's command line.
56 This can be accomplished creating a local user group on the NT machine, grant the privilege,
57 and adding users to it.
60 You will need to set the following line in
62 to enable the authenticator:
64 .if !'po4a'hide' .B auth_param basic program c:/squid/libexec/basic_sspi_auth.exe [options]
68 You will need to set the following lines in
70 to enable authentication for your access list:
72 .if !'po4a'hide' .B acl aclName proxy_auth REQUIRED
74 .if !'po4a'hide' .B http_access allow aclName
78 You will need to specify the absolute path to
79 .B basic_sspi_auth.exe
81 .B "auth_param basic program"
87 .B basic_sspi_auth.exe
88 is tested prior to being used in a
89 production environment. It may behave differently on different platforms.
90 To test it, run it from the command line. Enter username and password
91 pairs separated by a space. Press ENTER to get an OK or ERR message.
94 behaves the same as a carriage return.
99 Test that entering no details does not result in an
105 Test that entering an invalid username and password results in an
109 Note that if NT guest user access is allowed on the PDC, an
111 message may be returned instead of
114 Test that entering a valid username and password results in an
118 Test that entering a guest username and password returns the correct
119 response for the site's access policy.
122 This program was written by
123 .if !'po4a'hide' .I Guido Serassio <guido.serassio@acmeconsulting.it>
125 Based on prior work by
126 .if !'po4a'hide' .I Antonino Iannella (2000)
127 .if !'po4a'hide' .I Andrew Tridgell (1997)
128 .if !'po4a'hide' .I Richard Sharpe (1996)
129 .if !'po4a'hide' .I Bill Welliver (1999)
131 This manual was written by
132 .if !'po4a'hide' .I Guido Serassio <guido.serassio@acmeconsulting.it>
133 .if !'po4a'hide' .I Amos Jeffries <amosjeffries@squid-cache.org>
137 * Copyright (C) 1996-2016 The Squid Software Foundation and contributors
139 * Squid software is distributed under GPLv2+ license and includes
140 * contributions from numerous individuals and organizations.
141 * Please see the COPYING and CONTRIBUTORS files for details.
143 This program and documentation is copyright to the authors named above.
145 Distributed under the GNU General Public License (GNU GPL) version 2 or later (GPLv2+).
148 Questions on the usage of this program can be sent to the
149 .I Squid Users mailing list
150 .if !'po4a'hide' <squid-users@squid-cache.org>
153 Bug reports need to be made in English.
154 See http://wiki.squid-cache.org/SquidFaq/BugReporting for details of what you need to include with your bug report.
156 Report bugs or bug fixes using http://bugs.squid-cache.org/
158 Report serious security bugs to
159 .I Squid Bugs <squid-bugs@squid-cache.org>
161 Report ideas for new improvements to the
162 .I Squid Developers mailing list
163 .if !'po4a'hide' <squid-dev@squid-cache.org>
166 .if !'po4a'hide' .BR squid "(8), "
167 .if !'po4a'hide' .BR GPL "(7), "
170 .if !'po4a'hide' http://wiki.squid-cache.org/SquidFaq
172 The Squid Configuration Manual
173 .if !'po4a'hide' http://www.squid-cache.org/Doc/config/