Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-21 Thread Fabio Bucci
apologize for my mail... Fabio 2016-01-14 6:09 GMT+01:00 LYMN <brett.l...@baesystems.com>: > On Wed, Jan 13, 2016 at 09:30:46AM +0100, Fabio Bucci wrote: >> Hi All, >> i want to terminate a previous job did by ex colleague is changed >> company. Now there is a

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-13 Thread Fabio Bucci
Hi All, i want to terminate a previous job did by ex colleague is changed company. Now there is a cluster of 2 nodes of squid with NTLM transparent authentication and one spare node i'm using as test and configured with kerberos instead. Reading a lot of info i understood kerberos is more stable

Re: [squid-users] Squid with NTLM auth behind netscaler

2016-01-11 Thread Fabio Bucci
Hi, could you help me in looking for what it's wrong? Regar,ds Fabio 2016-01-07 14:26 GMT+01:00 Fabio Bucci <fabiett...@gmail.com>: > Hi Amos, > just configured squid.conf as: > > auth_param negotiate program /usr/lib64/squid/negotiate_kerberos_auth > -d -s HTTP/myprox

Re: [squid-users] Squid with NTLM auth behind netscaler

2016-01-11 Thread Fabio Bucci
Yes of course. But i'm wondering if all the configuration are right. Thanks, Fabio 2016-01-11 9:43 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 11/01/2016 9:34 p.m., Fabio Bucci wrote: >> Hi, >> could you help me in looking for what it's wrong? >> >

Re: [squid-users] Squid with NTLM auth behind netscaler

2016-01-11 Thread Fabio Bucci
Yes of course. But i'm wondering if all the configuration are right. 2016-01-11 9:43 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 11/01/2016 9:34 p.m., Fabio Bucci wrote: >> Hi, >> could you help me in looking for what it's wrong? >> > > The client

Re: [squid-users] Squid with NTLM auth behind netscaler

2016-01-11 Thread Fabio Bucci
Could you kindly write me what i need to post in order to review? 2016-01-11 11:53 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 11/01/2016 11:26 p.m., Fabio Bucci wrote: >> Yes of course. But i'm wondering if all the configuration are right. >> > > The Squid

Re: [squid-users] Squid with NTLM auth behind netscaler

2016-01-07 Thread Fabio Bucci
requires me credentials popup and even if i put them it asks me again Thanks, Fabio 2015-12-31 6:30 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 2015-12-31 03:42, Fabio Bucci wrote: >> >> Could you help me in kerberos configuration only? I don't want a fallback > >

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-29 Thread Fabio Bucci
> other options. > (I have not tried them both yet) > > Eliezer > > On 29/12/2015 16:30, Fabio Bucci wrote: >> >> Hi Amos, >> i'm trying to implement kerberos as you suggested me. But following >> the guide i read "Do not use this method if you run winbi

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-29 Thread Fabio Bucci
e winbindd method. How can i implement so? Thanks 2015-12-16 21:12 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 17/12/2015 5:34 a.m., Fabio Bucci wrote: >> i'm planning to migrate to kerberos instead NTLM.i got a question for >> you Amos: sometimes a cli

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-16 Thread Fabio Bucci
ely client issue? thanks, Fabio 2015-12-12 5:00 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 12/12/2015 3:42 a.m., Fabio Bucci wrote: > > Thank Amos i know you suggested kerberos. How can i implement it instead > of > > LDAP? > > <http://wiki.squid-cac

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-11 Thread Fabio Bucci
No suggestions? 2015-12-07 14:57 GMT+01:00 Fabio Bucci <fabiett...@gmail.com>: > Thanks Amos. > So, what do you suggest? Implement kerberos authetication instead NTLM one? > > I have to check if netscaler is able to perform that kind hack you wrote > before. > > Thanks

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-11 Thread Fabio Bucci
Thank Amos i know you suggested kerberos. How can i implement it instead of LDAP? 2015-12-11 15:39 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 12/12/2015 3:08 a.m., Fabio Bucci wrote: > > No suggestions? > > > > I've already suggested several times to u

Re: [squid-users] Squid with NTLM auth behind netscaler

2015-12-07 Thread Fabio Bucci
Thanks Amos. So, what do you suggest? Implement kerberos authetication instead NTLM one? I have to check if netscaler is able to perform that kind hack you wrote before. Thanks again, Fabio 2015-12-05 7:22 GMT+01:00 Amos Jeffries <squ...@treenet.co.nz>: > On 5/12/2015 5:39 a.m., Fa

[squid-users] Squid with NTLM auth behind netscaler

2015-12-04 Thread Fabio Bucci
Hi All, my task is implementing a squid proxy that allow all my authenticated (windows AD) internal users to surf internet without any credential request (pop-up). Plus, i created two squid nodes and put them behind a citrix netscaler in order to perform a load balance service. I configured