]> git.ipfire.org Git - thirdparty/squid.git/commit
ext_kerberos_ldap_group_acl: -n option to disable automated SASL/GSSAPI
authorMarkus Moeller <huaraz@moeller.plus.com>
Wed, 29 Oct 2014 04:47:53 +0000 (21:47 -0700)
committerAmos Jeffries <squid3@treenet.co.nz>
Wed, 29 Oct 2014 04:47:53 +0000 (21:47 -0700)
commit7451e5ad6ac9da02c6325c81faaaa7a0d2e4d6a7
treeeb384d254bf020b96b32fd58d0dc0682f8536146
parent2eb6054faf2503474cb500cdc4cb87aed073744b
ext_kerberos_ldap_group_acl: -n option to disable automated SASL/GSSAPI

The -n option disables the automated Kerberos authentication
(SASL/GSSAPI) to AD and requires username/password (SASL/SIMPLE)
instead.

Also, improvements in caching Kerberos credentials for setup with low
Squid cache TTL.
helpers/external_acl/kerberos_ldap_group/kerberos_ldap_group.cc
helpers/external_acl/kerberos_ldap_group/support.h
helpers/external_acl/kerberos_ldap_group/support_krb5.cc
helpers/external_acl/kerberos_ldap_group/support_ldap.cc