Karl Karlsson wrote:

quoted text
> Those standards i fully agree with. I got a bit a float there and thought
> you meant it in a broader sense as it's going almost everywhere these days
> where they use pam to glue every one and everything together. But this
> really is off topic from that AD where we started. :)

Not entirely, if you could add something like the following, but pam may 
not be so relevant for Squid:

  /etc/pam.d/common-krb5 to use as an include file for PAM:
    auth  sufficient  /lib/insecurity/pam_ad.so use_first_pass

Regards
-Lars