Re: [squid-users] enctype aes256-cts found in keytab but cannot decrypt ticket
On 24/04/24 17:31, ivc chgaki wrote:
hello. i hve Samba DC and squid. i created user, then SPN, and then
exported keytab and imported him to squid. im using kerberos negotiate
helper but when i try go to internet i have popup window with
login/password and in cace.log log error
2024/04/21 21:41:58 kid1| ERROR: Negotiate Authentication validating
user. Result: {result=BH, notes={message: gss_accept_sec_context()
failed: Unspecified GSS failure. Minor code may provide more
information. Request ticket server
HTTP/srv-proxy.mydomain@myadomain.com kvno 2 enctype aes256-cts
found in keytab but cannot decrypt ticket; }}
HTH
Amos
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users
[squid-users] enctype aes256-cts found in keytab but cannot decrypt ticket
hello. i hve Samba DC and squid. i created user, then SPN, and then
exported keytab and imported him to squid. im using kerberos negotiate
helper but when i try go to internet i have popup window with
login/password and in cace.log log error
2024/04/21 21:41:58 kid1| ERROR: Negotiate Authentication validating user.
Result: {result=BH, notes={message: gss_accept_sec_context() failed:
Unspecified GSS failure. Minor code may provide more information. Request
ticket server HTTP/srv-proxy.mydomain@myadomain.com kvno 2 enctype
aes256-cts found in keytab but cannot decrypt ticket; }}
why this happen? i can see using klist that in keytab aes256 on place, but
why squid cant decrypt?
___
squid-users mailing list
squid-users@lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users
