[squid-users] AD Ldap (automatically take the user that is logging on PC)

[LYMN]

On Thu, Aug 18, 2016 at 04:45:54PM +1200, Amos Jeffries wrote:
> 
> IIRC, there is a setting somewhere called "Use Windows Integrated
> Authentication" that sometimes has to be enabled for SSO to work with
> non-Microsoft designed authentication schemes.
> 

Not in my experience - if you have "Use Windows Integrated
Authentication" (it is in the Advanced tab of the IE configuration,
under the security section) ticked then IE will just try Kerberos and
NTLM.  If your proxy supports neither (or the client isn't in the
kerberos realm) then IE will continually prompt for authentication and
not get anywhere.  If you untick that option then IE will try Basic
authentication.

-- 
Brett Lymn
This email has been sent on behalf of one of the following companies within the BAE Systems Australia group of companies:

    BAE Systems Australia Limited - Australian Company Number 008 423 005
    BAE Systems Australia Defence Pty Limited - Australian Company Number 006 870 846
    BAE Systems Australia Logistics Pty Limited - Australian Company Number 086 228 864

Our registered office is Evans Building, Taranaki Road, Edinburgh Parks,
Edinburgh, South Australia, 5111. If the identity of the sending company is
not clear from the content of this email please contact the sender.

This email and any attachments may contain confidential and legally
privileged information.  If you are not the intended recipient, do not copy or
disclose its content, but please reply to this email immediately and highlight
the error to the sender and then immediately delete the message.