Re: [squid-users] Active Directory Integrated Squid Proxy Guide

From: berry guru <berryguru_at_gmail.com>
Date: Tue, 10 Jan 2012 17:11:13 -0800

I forgot to mention that I'm running Server 2008 R2 domain
controllers. Secondly, when I do a 'locate PROXY.keytab' I can't find
it which should be in the squid correctly if I'm not mistaken.

On Tue, Jan 10, 2012 at 5:00 PM, berry guru <berryguru_at_gmail.com> wrote:
> Thanks for responding back James.  I'm new to Linux, and new to Squid
> but I'm very intrigued and would like to learn.  So I did a little
> more digging through the configuration and I came across something.
> I'm currently running Squid 2.7 (I'm a little afraid to do the upgrade
> and mess something up, and don't know how yet) but in the config line
> 'default_keytab_name = /etc/squid3/PROXY.keytab' you list Squid3.
> Could that be a problem?
>
> As for my resolv.conf I simply have both of my internal DNS servers
> listed.  Not quite sure what else to verify.  I've also added my Squid
> box to the unlimited policy on my network to make sure nothing is
> blocking it.
>
> How can I go about troubleshooting this with logs maybe, if possible?
>
>
> On Tue, Jan 10, 2012 at 1:15 PM, James Robertson <j_at_mesrobertson.com> wrote
>> Hi Evan,
>>
>> You should probably double check your DNS on the proxy (resolv.conf)
>> and the domain and look for any typo's in that and your kerberos
>> config.
>>
>> The fact that it could not resolve one (or possibly more) of your KDC
>> addresses could cause you problems later on - especially when msktutil
>> needs to do --auto-updates.
>>
>> Cheers
>>
>> On 11 January 2012 07:33, berry guru <berryguru_at_gmail.com> wrote:
>>> Hi James,
>>>
>>> So I don't mean to be a pest, but I've ran into another issue.  I've
>>> ran the kinit administrator command but I'm getting the following
>>> error:
>>>
>>> kinit: Cannot resolve network address for KDC in realm "COMPANY.LOCAL"
>>> while getting initial credentials.
>>>
>>> I poked around online and I saw a few issues regarding my error, but
>>> the resolve was making the realm all caps.
>>>
>>>
>>> Cheers,
>>>
>>> Evan
>>>
>>>
>>> On Sun, Jan 8, 2012 at 9:58 PM, James Robertson <j_at_mesrobertson.com> wrote:
>>>> Hi Everyone,
>>>>
>>>> I just thought I would share a guide I am working on, it's not quite
>>>> finished so expect errors, typo's etc.  I would love any feedback or
>>>> critique about it.
>>>>
>>>> http://wiki.bitbinary.com/index.php/Active_Directory_Integrated_Squid_Proxy
>>>>
>>>> There is probably things that the developers and users will cringe at,
>>>> if so I would like to know.
>>>>
>>>> Thanks for maintaining squid and the for the friendly mailing lists.
>>>>
>>>> Kind Regards,
>>>>
>>>> James
Received on Wed Jan 11 2012 - 01:11:20 MST

This archive was generated by hypermail 2.2.0 : Wed Jan 11 2012 - 12:00:02 MST