Re: [squid-users] Re: problems squid_kerb_auth

From: spiderslack <spiderslack_at_yahoo.com.br>
Date: Mon, 30 May 2011 18:08:23 -0400

Hi,

I testing with Internet Explorer and obtain this error

2011/05/30 22:06:36| squid_kerb_auth: gss_acquire_cred() failed:
Unspecified GSS failure. Minor code may provide more information. Key
table entry not found

Regards

On 05/30/2011 05:52 PM, spiderslack wrote:
> Hi,
>
> For the log can not see any connection against the Active Directory on
> port 88 (kerberos, right). Attached is the. pcap. I did the
> configuration of firefox as below
>
> firefox set variables as follows:
>
> network.negotiate-auth.delegation-uris=vialactea.corp
> network.negotiate-auth.trusted-uris= vialactea.corp
>
> where vialactea.corp is the domain of the Active Directory. I tried in
> IE but he keeps asking for login and password infinitely
>
> Regards
>
> On 05/29/2011 09:39 AM, Markus Moeller wrote:
>> Hi,
>>
>> The squid log file says that the client could not use Kerberos and
>> fell back to NTLM.
>>
>> Can you capture the traffic from the client to the proxy and to your
>> Kerberos servers (e.g. active directory) with wireshark and send me
>> the cap file (if not too big) ?
>>
>> Markus
>
Received on Wed Jun 01 2011 - 03:39:16 MDT

This archive was generated by hypermail 2.2.0 : Wed Jun 01 2011 - 12:00:04 MDT