Re: [squid-users] Kerberos Ne
so... any advice about this?? Thanks! -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Kerberos-appropriate-log-file-tp4679740p4679901.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Kerberos Ne
Hi. yes, i see this now. it's strange... authentication is working fine... i can surf the web... but im having some error in cache.log... tail -f /var/log/squid/cache.log 2016/09/29 15:43:37 kid1| Adding nameserver 192.168.1.10 from squid.conf 2016/09/29 15:43:37 kid1| Adding nameserver 192.168.1.6 from squid.conf 2016/09/29 15:43:37 kid1| helperOpenServers: Starting 5/32 'ssl_crtd' processes 2016/09/29 15:43:37 kid1| helperOpenServers: Starting 0/10 'negotiate_kerberos_auth' processes 2016/09/29 15:43:37 kid1| helperStatefulOpenServers: No 'negotiate_kerberos_auth' processes needed. 2016/09/29 15:43:37 kid1| helperOpenServers: Starting 5/5 'ext_kerberos_ldap_group_acl' processes 2016/09/29 15:43:38 kid1| helperOpenServers: Starting 5/5 'ext_kerberos_ldap_group_acl' processes 2016/09/29 15:43:38 kid1| HTCP Disabled. 2016/09/29 15:43:38 kid1| Finished loading MIME types and icons. 2016/09/29 15:43:38 kid1| Accepting SSL bumped HTTP Socket connections at local=192.168.1.12:3128 remote=[::] FD 49 flags=9 2016/09/29 15:44:15 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:15 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes support_krb5.cc(64): pid=11755 :2016/09/29 15:44:15| kerberos_ldap_group: ERROR: Error while initialising credentials from keytab : Preauthentication failed support_krb5.cc(64): pid=11755 :2016/09/29 15:44:15| kerberos_ldap_group: ERROR: Error while initialising credentials from keytab : Preauthentication failed support_krb5.cc(64): pid=11755 :2016/09/29 15:44:15| kerberos_ldap_group: ERROR: Error while initialising credentials from keytab : Preauthentication failed 2016/09/29 15:44:27 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:27 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes 2016/09/29 15:44:27 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:27 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes 2016/09/29 15:44:27 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:27 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes 2016/09/29 15:44:27 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:27 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes 2016/09/29 15:44:27 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:27 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes 2016/09/29 15:44:27 kid1| Starting new negotiateauthenticator helpers... 2016/09/29 15:44:27 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes support_krb5.cc(64): pid=11760 :2016/09/29 15:45:03| kerberos_ldap_group: ERROR: Error while initialising credentials from keytab : Preauthentication failed support_krb5.cc(64): pid=11760 :2016/09/29 15:45:03| kerberos_ldap_group: ERROR: Error while initialising credentials from keytab : Preauthentication failed support_krb5.cc(64): pid=11760 :2016/09/29 15:45:03| kerberos_ldap_group: ERROR: Error while initialising credentials from keytab : Preauthentication failed This is access.log 1475174886.981 23 192.168.1.121 TCP_MEM_HIT/200 3993 GET http://images.clarin.com/deportes/Boca-Lanus_CLAVID20160928_0082_32.jpg us...@example.lan HIER_NONE/- image/jpeg 1475174886.994 41 192.168.1.121 TCP_MEM_HIT/200 4601 GET http://images.clarin.com/deportes/penales-dieron-triunfo-Boca_CLAVID20160928_0085_32.jpg us...@example.lan HIER_NONE/- image/jpeg 1475174887.124148 192.168.1.121 TCP_MISS/200 19321 GET http://images.clarin.com/politica/Bonafini-Cesar-Milani-Asociacon-Madres_CLAIMA20160622_0266_47.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image/jpeg 1475174887.139182 192.168.1.121 TCP_MISS/200 4389 GET http://images.clarin.com/extrashow/Cristian-Castro-winner_CLAVID20160929_0011_32.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image/jpeg 1475174887.280288 192.168.1.121 TCP_MISS/200 20143 GET http://images.clarin.com/politica/Macri-Tecnopolis-presentar-proyectos-emprendedores_CLAIMA20160821_0007_44.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image/jpeg 1475174887.340163 192.168.1.121 TCP_MISS/200 5715 GET http://images.clarin.com/mundo/herida-choque-Nueva-Jersey-AFP_CLAIMA20160929_0106_44.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image/jpeg 1475174887.369411 192.168.1.121 TCP_MISS/200 29566 GET http://images.clarin.com/policiales/jefatura-departamental-frente-edificios-publicos_CLAIMA20160408_0426_50.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image/jpeg 1475174887.388 95 192.168.1.121 TCP_MISS/200 5185 GET http://images.clarin.com/mundo/Hoboken-edificios-Nueva-York-AP_CLAIMA20160929_0127_45.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image/jpeg 1475174888.099 1141 192.168.1.121 TCP_MISS/200 20771 GET http://images.clarin.com/politica/Reunion-CGT-Gobierno-Foto-DyN_CLAIMA20160929_0102_43.jpg us...@example.lan HIER_DIRECT/200.42.136.212 image
Re: [squid-users] Kerberos Ne
On 29/09/2016 3:02 a.m., erdosain9 wrote: > Hi. > Sorry for my ignorance, but, i have squid authentication with kerberos... > > all is working fine... > > but i have some behavior in cache.log that... i dont know if this is the > expected, or there is some problem > > because the file is going to be huge as put the squid in production ... this > is appropriate behavior, or is warning of a problem? > > this is just a little of "cache.log" and with just one user... so i think is > a lot of info... this is ok?? > It's not clear what you are asking about exactly. The amount of info the helper is dumping into cache.log is because you have the helpers debug (-d) enabled in its auth_param program line. Once you have the auth working you should turn that off of course (remove the -d option). Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Kerberos Ne
On Wednesday 28 September 2016 at 16:02:42, erdosain9 wrote: > Hi. > Sorry for my ignorance, but, i have squid authentication with kerberos... > > all is working fine... > > but i have some behavior in cache.log that... i dont know if this is the > expected, or there is some problem > > because the file is going to be huge as put the squid in production ... > this is appropriate behavior, or is warning of a problem? Please post here your current squid.conf without comments or blank lines. Antony. -- All matter in the Universe can be placed into one of two categories: 1. Things which need to be fixed. 2. Things which need to be fixed once you've had a few minutes to play with them. Please reply to the list; please *don't* CC me. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] Kerberos Ne
Hi. Sorry for my ignorance, but, i have squid authentication with kerberos... all is working fine... but i have some behavior in cache.log that... i dont know if this is the expected, or there is some problem because the file is going to be huge as put the squid in production ... this is appropriate behavior, or is warning of a problem? this is just a little of "cache.log" and with just one user... so i think is a lot of info... this is ok?? 2016/09/28 10:58:08 kid1| helperOpenServers: Starting 1/10 'negotiate_kerberos_auth' processes negotiate_kerberos_auth.cc(487): pid=9723 :2016/09/28 10:58:08| negotiate_kerberos_auth: INFO: Starting version 3.0.4sq negotiate_kerberos_auth.cc(546): pid=9723 :2016/09/28 10:58:08| negotiate_kerberos_auth: INFO: Setting keytab to /etc/squid/PROXY.keytab negotiate_kerberos_auth.cc(570): pid=9723 :2016/09/28 10:58:08| negotiate_kerberos_auth: INFO: Changed keytab to MEMORY:negotiate_kerberos_auth_9723 negotiate_kerberos_auth.cc(610): pid=9723 :2016/09/28 10:58:08| negotiate_kerberos_auth: DEBUG: Got 'YR YIIGcQYGKwYBBQUCoIIGZTCCBmGgMDAuBgkqhkiC9xIBA gIGCSqGSIb3EgECAgYKKwYBBAGCNwICHgYKKwYBBAGCNwICCqKCBisEggYnYIIGIwYJKoZIhvcSAQICAQBuggYSMIIGDqADAgEFoQMCAQ6iBwMFACCjggSaYYIEljCCBJKgAwIBBaEUGxJFU1 BBQ0lPTUVNT1JJQS5MQU6iKzApoAMCAQKhIjAgGwRIVFRQGxhzcXVpZC5lc3BhY2lvbWVtb3JpYS5sYW6jggRGMIIEQqADAgESoQMCAQGiggQ0BIIEMKZf4kp8jYe6rqDiqZVclO1QD0fVSDYKdMt teiw3I/nw0dvJwaQzgLbbs1hnhVfbKD77eKbQfJNBFcwcRr6bQRE/AySa+qOGZj3flRwxJgzcf6/wAMgfUNqU0qubkpH8BYhzd7q1KFI2t0vxAIZyj+O8Ot0HdKb3QH2ZC8EW5yCvGeYmLzkNBR4c JLm6vLOAdwdqyHnBLuwjQyXrLEcEOS9CmBCF9AJMAr3Kmegicax2fzhzz2MgYE80O+aJ983ffVU2wFW1W1r766cEDYtxNT7CWVf1zRnAeOLpj7dSp3a5o3gMke0Y526zidlgkrEX2XCnMot2PnD9t NNbcUwS1Hgp+Dkq7mJ6hsPTB0rDh/GGhS/yTTB0s/aT6++dq3CXl3glCy3bfax9UMnrHYSOrI8SVuPrva4SLgbTAcHPrmfWPbowf/ZOqGJ+94mOMdKzkhJIJcPz5KE5PiaOX/6N+hTGWc1mTzIzP3 V7/Wy8jWIPY+vBbE2hgykpgPCYEkVSz6KbuSiOx0TUEYG0d4hIvlwpx1VhSJoHU3/yStiodVpuSYiDr9UTrPe36c/hAd0G4IyTq/HC6JIicIf5joMsp6TKwp7q5+MQWLBNuQnXDl6bBrAw2sqvT96 mGkf4ZfowzWVgV8GeObZopIbMRYtG1C/NmgzK1ro9JiPDwsCS+bMs4rpNfiw7i+0LBGI5DTkWZwAhaZTZsbCXGSyeYnUkbKtuSLlczHCiAOyN4hQgXtXbL26rN4AqmF7rLlCgMlQPvxrVAjQ1cOqq t9ZBxej/JzSrq5Xhifu0KqurZ5oZ8baNZJ/nBv2N5ntXpUli/9S5Qs4T5hR0khUdt2Vb9Hzx/pLRbF6Wo4iTCw1I7qH+QYVqDH2ZzlWC18ZVN1mPXLIsdii6edbNl/PY5o8htGfZnOOf8nlij3ZFl CquzYKQNusQgN7RK/DcqJlxfE9CIoZyOPic5rC7nJ3Q55Bzx2+UTdS6JvNRVy+QmFMyUYpbDVF7VIZan6J2hf+2ND8+D5X3VhVhLYqQFPfmgJGeWUkcb/FGJoNPWTl5t3JSh6ASS2JzHwfChTwOwy NXs2ej8s2IVYh8H6TLKdDiWmuhJZAyE5r8wnAgpIwgq+Jt1Cpj1wAToCJrXc6XZ77yA9NlD5iyz4Us2JsUBmXO1RpSXWBCev3il/TiL/+Ifu3ShrIeusUNDEMzsFjlhRuXuSKhzH9dolnKl8fSwKu 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' from squid (length: 2207). negotiate_kerberos_auth.cc(663): pid=9723 :2016/09/28 10:58:08| negotiate_kerberos_auth: DEBUG: Decode 'YIIGcQYGKwYBBQUCoIIGZTCCBmGgMDAuBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKwYBBAGCNwICHgYKKwYBBAGCNwICCqKCBisEggYnYIIGIwYJKoZIhvcSAQICAQBuggYSMIIGDqADAgEFoQMCAQ6iBwMFACCjggSaYYIEljCCBJKgAwIBBaEUGxJFU1BBQ0lPTUVNT1JJQS5MQU6iKzApoAMCAQKhIjAgGwRIVFRQGxhzcXVpZC5lc3BhY2lvbWVtb3JpYS5sYW6jggRGMIIEQqADAgESoQMCAQGiggQ0BIIEMKZf4kp8jYe6rqDiqZVclO1QD0fVSDYKdMtteiw3I/nw0dvJwaQzgLbbs1hnhVfbKD77eKbQfJNBFcwcRr6bQRE/AySa+qOGZj3flRwxJgzcf6/wAMgfUNqU0qubkpH8BYhzd7q1KFI2t0vxAIZyj+O8Ot0HdKb3QH2ZC8EW5yCvGeYmLzkNBR4cJLm6vLOAdwdqyHnBLuwjQyXrLEcEOS9CmBCF9AJMAr3Kmegicax2fzhzz2MgYE80O+aJ983ffVU2wFW1W1r766cEDYtxNT7CWVf1zRnAeOLpj7dSp3a5o3gMke0Y526zidlgkrEX2XCnMot2PnD9tNNbcUwS1Hgp+Dkq7mJ6hsPTB0rDh/GGhS/yTTB0s/aT6++dq3CXl3glCy3bfax9UMnrHYSOrI8SVuPrva4SLgbTAcHPrmfWPbowf/ZOqGJ+94mOMdKzkhJIJcPz5KE5PiaOX/6N+hTGWc1mTzIzP3V7/Wy8jWIPY+vBbE2hgykpgPCYEkVSz6KbuSiOx0TUEYG0d4hIvlwpx1VhSJoHU3/yStiodVpuSYiDr9UTrPe36c/hAd0G4IyTq/HC6JIicIf5joMsp6TKwp7q5+MQWLBNuQnXDl6bBrAw2sqvT96mGkf4ZfowzWVgV8GeObZopIbMRYtG1C/NmgzK1ro9JiPDwsCS+bMs4rpNfiw7i+0LBGI5DTkWZwAhaZTZsbCXGSyeYnUkbKtuSLlczHCiAOyN4hQgXtXbL26rN4AqmF7rLlCgMlQPvxrVAjQ1cOqqt9ZBxej/JzSrq5Xhifu0KqurZ5oZ8baNZJ/nBv2N5ntXpUli/9S5Qs4T5hR0khUdt2Vb9Hzx/pLRbF6Wo4iTCw1I7qH+QYVqDH2ZzlWC18ZVN1mPXLIsdii6edbNl/PY5o8htGfZnOOf8nlij3ZFlCquzYKQNusQgN7RK/DcqJlxfE9CIoZyOPic5rC7nJ3Q55Bzx2+UTdS6JvNRVy+QmFMyUYpbDVF7VIZan6J2hf+2ND8+D5X3VhVhLYqQFPfmgJGeWUkcb/FGJoNPWTl5t3JSh6ASS2JzHwfChTwOwyNXs2ej8s2IVYh8H6TLKdDiWmuhJZAyE5r8wnAgpIwgq+Jt1Cpj1wAToCJrXc6XZ77yA9NlD5iyz4Us2JsUBmXO1RpSXWBCev3il/TiL/+Ifu3ShrIeusUNDEMzsFjlhRuXuSKhzH9dolnKl8fSwKuP4HyObuySUKP+4tCdOMZ/4VN1Rp8UCnrmbDcAvhPxpkoDx34KuXD4OY
