Re: [squid-users] squid_kerb_auth Backup-Auth server?

From: Mrvka Andreas <mrv_at_tuv.at>
Date: Mon, 5 Oct 2009 10:30:07 +0200

Thanks for response.

I will try it.

But as Markus mentioned before, authentication doesn't need any configured
KDCs because it looks into AD - it didn't help for me maybe caused by one kdc
entry in the realm section you mentioned below.

I hope I find time to test both scenarios.

Regards
Andrew

Am Freitag, 2. Oktober 2009 22:26:19 schrieb andrew:
> Mrvka Andreas wrote:
> > Hi list,
> >
> > does anybody know if there is any change to define a backup kerberos
> > authentication server?
> >
> > Do I have to set anything in krb5.conf to support more than one AD
> > server?
> >
> > If I want to reboot the kerberos server squid should still be able to
> > authenticate.
> >
> > Are there any hints?
> >
> > Regards
> > Andrew
>
> Try several "kdc" lines in the /etc/krb5.conf file.
> Like this
>
> [realms]
> DOMAIN.BLA = {
> kdc = kerbserver1.domain.bla
> kdc = kerbserver2.domain.bla
>
> }
>
>
> HTH,
>
> Andrew
>
Received on Mon Oct 05 2009 - 08:30:15 MDT

This archive was generated by hypermail 2.2.0 : Mon Oct 05 2009 - 12:00:02 MDT