Igama lomsingathi we-proxy liyingxenye yokungena nge-Kerberos
Vumelanisa igama le-proxy lekhasimende ne-HTTP service principal kanye ne-keytab esetshenziswa yi-proxy.
Ukuqinisekisa isizinda okuzenzakalelayo ku-HTTP proxy kungasebenzisa i-Negotiate ne-Kerberos. Ikhasi meli idinga ithikithi lesevisi ye-proxy, hhayi iphasiwedi yewebhusayithi ekhunjulwayo kuphela.
Nge-proxy emenyezelwa njenge-proxy.example.net, i-service principal ingaba nalesi simo:
HTTP/[email protected]Igama lomsingathi elisetshenziswa yikhasi meli, i-service principal ebhalisiwe kanye ne-keytab ye-proxy kufanele kuhambisane nokufakwa. Ukulungiselela kwe-Kerberos kwe-Squid kubhala i-HTTP service principal nokusetshenziswa kwale mpahla yokhiye ngumsizi.
Ukusebenzisa ikheli le-IP noma esinye isibongo kungashintsha ukukhethwa kwegama lesevisi okuvamile. Ngaphambi kokushintsha amaphasiwedi abasebenzisi, thola ukuthi iyiphi i-proxy eyasetshenziswa yikhasi meli ngempela nokuthi iyiphi indlela yokuqinisekisa eyaqedwa noma yehluleka.
I-Negotiate iyindlela yokuxoxisana. I-Windows ingakhetha i-Kerberos noma ibuyele ku-NTLM ngaphansi kwemibandela esebenzayo; ukubona igama elithi Negotiate akufakazi ukuthi ukushintshana kwe-Kerberos kuphumelele.
Gcina ukusetshenziswa kwezifakazelo okuzenzakalelayo ngaphakathi kwenqubomgomo yekhasimende nesizinda ehloselwe le proxy. Isikhathi sesiphequluli esivamile nesevisi esebenza ngaphansi kwe-akhawunti enye kungathola izifakazelo nemiphumela yokugunyazwa ehlukile.