If I remember right IE6 does not support Kerberos authentication.

Markus

<[email protected]> wrote in message news:997475869-1340759347-cardhu_decombobulator_blackberry.rim.net-1421572974-@b25.c1.bise7.blackberry...
Problem only for IE6 only
Sent from my BlackBerry® smartphone from du

-----Original Message-----
From: "Markus Moeller" <[email protected]>
Date: Tue, 26 Jun 2012 21:16:54
To: <[email protected]>
Subject: [squid-users] Re: Re: Re: Squid Kerberos authentication error
What is the proxy name you use in the  IE  configuration ?  What are the
other browsers / systems which work ?

Markus

<[email protected]> wrote in message
news:903157024-1340705263-cardhu_decombobulator_blackberry.rim.net-1488955688-@b25.c1.bise7.blackberry...
Now its working in all browsers but not in IE with windows XP. My active
directory is in windows 2003
------Original Message------
From: Mohamed Navas
To: 'Markus Moeller'
To: [email protected]
Subject: RE: [squid-users] Re: Re: Squid Kerberos authentication error
Sent: 26 Jun 2012 9:27 AM

I could solve the issue by creating keytabs within the MS server and
exported to Linux machine and is working fine with msktutils itself...
Still do not find out the reason for not created it in Linux machine !

-----Original Message-----
From: Markus Moeller [mailto:[email protected]]
Sent: Sunday, June 24, 2012 9:39 PM
To: [email protected]
Subject: [squid-users] Re: Re: Squid Kerberos authentication error

You can use samba to create the keytab, but you mustn't use any samba
daemon as the daemon will reset the key in AD after a predefined time and
thereby invalidate the key in your keytab.

Regards
Markus


"Navas" <[email protected]> wrote in message
news:[email protected]...
One more thing I am using Samba, I could not use mskutil. Is there any
issue with Kerberos and Samba.
OS: Redhat EL6.2
squid-3.1

thanks,

-----Original Message-----
From: Markus Moeller [mailto:[email protected]]
Sent: Sunday, June 24, 2012 2:59 PM
To: [email protected]
Subject: [squid-users] Re: Squid Kerberos authentication error

Can you check that the squid user has read access to the Kerberos keytab
?
Did you set the environment variable KRB5_KTNAME pointing to the
Kerberos keytab in the startup script ?

Markus

"Navas" <[email protected]> wrote in message
news:[email protected]...
Hi,
I am trying  to setup squid to authenticate as AD with kerberos as
per the following document

http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActive
D
irecto
ry

but I am getting following error in cache log,

authenticateNegotiateHandleReply: Error validating user via Negotiate.
Error
returned 'BH gss_acquire_cred() failed: Unspecified GSS failure.
Minor code may provide more information. Unknown error'

appreciated for your kind help ..

thanks,

abusam









Sent from my BlackBerry® smartphone from du





Reply via email to