Re: [squid-users] squid_ldap_auth and passwords in clear text

On fre, 2008-11-14 at 10:31 -0600, Johnson, S wrote:

> I just got the squid_ldap_auth working ok on my segment but when
> watching the protocol analyzer I see that the auth requests against the
> AD are coming in as clear text passwords. Is there anyway we can
> encrypt the ldap domain requests?

By AD do you refer to Microsoft AD? In such case use NTLM authentication
instead of LDAP.

You can also TLS encrypt the LDAP communication, but this does not
protect the credentials sent by browsers to Squid, just the
communication squid->LDAP.

Regards
Henrik