Magaca martigeliyaha proxy-ga waa qayb ka mid ah gelitaanka Kerberos

Aqoonsiga domain-ka otomaatiga ah ee proxy HTTP waxa uu isticmaali karaa Negotiate iyo Kerberos. Macmiilku waxa uu u baahan yahay tikitad loogu talagalay adeegga proxy-ga, ma aha oo kaliya erayga sirta ah ee websaydhka la xasuusto.

Proxy lagu dhawaaqay proxy.example.net, service principal waxa uu yeelan karaa qaabkan:

HTTP/[email protected]

Magaca martigeliyaha ee macmiilku isticmaalo, service principal-ka la diiwaangeliyay iyo keytab-ka proxy-gu waa in ay la jaanqaadaan hirgelinta. Habaynta Kerberos ee Squid waxa ay diiwaangelisaa HTTP service principal iyo isticmaalka maaddada furaha ee caawiyaha.

Isticmaalka cinwaan IP ama magac kale waxa uu beddeli karaa doorashada caadiga ah ee magaca adeegga. Ka hor inta aadan beddelin erayada sirta ah ee isticmaalayaasha, go'aanso magaca proxy-ga ee macmiilku dhab ahaan isticmaalay iyo habka aqoonsiga ee dhammaaday ama ku guuldareystay.

Negotiate waa hab gorgortan. Windows waxa uu dooran karaa Kerberos ama ku noqon karaa NTLM marka shuruudaha la khuseeyo jiraan; arka erayga Negotiate ma caddeeyo in isweydaarsiga Kerberos uu guulaystay.

Ku hay isticmaalka otomaatiga ah ee aqoonsiga gudaha siyaasadda macmiilka iyo domain-ka ee loogu talagalay proxy-kan. Kalfadhi caadi ah oo browser-ka iyo adeeg ku shaqeeya akoon kale waxa ay heli karaan aqoonsi iyo natiijooyin oggolaansho kala duwan.