[squid-users] Re: Help with Kerberos Configuration

From: Markus Moeller <huaraz_at_moeller.plus.com>
Date: Fri, 31 Aug 2012 18:03:25 +0100

You may need a third entry in the keytab for the VIP. IE will look for a
HTTP/<vip> ticket.


"brendan" <bpk678_at_gmail.com> wrote in message
>i have two squid instances on two separate servers. each is configured
> kerberos auth, and when i point at one or the other, the kerberos auth
> works
> fine. when i point to a load balanced VIP, the auth does not work. i
> found
> the below and tried the method using the one keytab file for both
> instances
> and the -s GSS_C_NO_NAME option in the conf file. this did not work as
> expected.
> the load balancing process i am using is the "balance" package for fedora
> 16. it does a SNAT on all requests it handles. could this be part of why
> i
> am having issues? i found a couple of packages that i might be able to
> use
> for load balancing in the repos, balance, ipvsadm and haproxy. does
> anyone
> have experience/success with any of these or might one be recommended over
> the others?
> --
> View this message in context:
> http://squid-web-proxy-cache.1019090.n4.nabble.com/Help-with-Kerberos-Configuration-tp4076779p4656345.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Fri Aug 31 2012 - 17:17:31 MDT

This archive was generated by hypermail 2.2.0 : Sat Sep 01 2012 - 12:00:05 MDT