Digest auth - Freeradius & squid

[Alan DeKok]

Germano Paciocco wrote:
> I think all recent browsers do it, is it right?

  The browsers don't do RADIUS.  You need to ensure that squid does RADIUS.

>>> How should I modify user entry in radcheck table?
> 
>> Don't.
> 
> Now I think it's a Squid problem. I know this is not the right place,
> but if someone has some hints regarding squid-freeradius interaction
> with digest authentication, please let me know!

  Read the squid documentation.

> PS: i followed this http://freeradius.org/radiusd/man/rlm_digest.html,
> and made digest auth works. By the way I thought that I had to store
> only password hash... why do I need yet to store cleartext password?

  Because digest authentication requires the cleartext password.

> It is possible avoid this (for http authentication)?

  No.

  Alan DeKok.