Hello Amos

So will the problem be solved when adding the squid_kerb_auth to the 
squid.conf, so when the client does ask for the Kerberos auth it can be 
supplied to him?



Dawie Pretorius

Dawie Pretorius wrote:
> Is it possible that someone can get back to me on this issue, thanks
> 
> Dawie Pretorius
> 
> Hello
> 
> Getting this error sometimes in my cache.log:
> 
> [2010/01/28 14:23:58, 1] libsmb/ntlmssp.c:ntlmssp_update(334)
>   got NTLMSSP command 3, expected 1
> 2010/01/28 14:25:51| AuthConfig::CreateAuthUser: Unsupported or 
> unconfigured/inactive proxy-auth scheme, ''
> 
> Gentoo squid-3.0.STABLE19 

Hi Dawie,

The "3" and "1" have been explained as the difference between NTLM vs 
Kerberos.

As far as I can tell "3" means Kerberos is being used. "1" is NTLM.
The ntlm_auth helper only checks NTLM and the squid_kerb_auth helper is 
needed instead for Kerberos.

Looks to me like the client is broken and using Kerberos when offered 
NTLM as the only available auth option.

Amos
-- 
Please be using
   Current Stable Squid 2.7.STABLE7 or 3.0.STABLE23
   Current Beta Squid 3.1.0.16

Note: Privileged/Confidential information may be contained in this message and 
may be subject to legal privilege. Access to this e-mail by anyone other than 
the intended is unauthorised. If you are not the intended recipient (or 
responsible for delivery of the message to such person), you may not use, copy, 
distribute or deliver to anyone this message (or any part of its contents ) or 
take any action in reliance on it. All reasonable precautions have been taken 
to ensure no viruses are present in this e-mail. As our company cannot accept 
responsibility for any loss or damage arising from the use of this e-mail or 
attachments we recommend that you subject these to your virus checking 
procedures prior to use. The views, opinions, conclusions and other information 
expressed in this electronic mail are not given or endorsed by the company 
unless otherwise indicated by an authorized representative independent of this 
message.

Reply via email to