Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-11-30 Thread Paul Freeman
Moeller Cc: squid-us...@squid-cache.org Subject: Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed Hi Markus Moeller, Hi Markus, Yeah, I'm currently using that option and permissions are correct too. On 27 Oct 2014 19:47, Markus Moeller

Re: [squid-users] Kerberos Authentication Failing for Windows 7+with BH gss_accept_sec_context() failed

2014-11-06 Thread Victor Sudakov
Victor Sudakov wrote: However, I am eager to know what could be causing such weird tickets to be issued, but I think only a Windows expert can tell. After all, the key in the tickets is correct, only the principal name is changed. I only suspect that the name is changed when the client sets

Re: [squid-users] Kerberos Authentication Failing for Windows 7+with BH gss_accept_sec_context() failed

2014-11-01 Thread Pedro Lobo
Hi Markus, Thanks for all your help. I'll do some more testing on monday and I'll let you know how it goes. Hopefully it'll be working as expected once having removed the unused AD servers and sorting out and sync issues. Cheers and have a great weekend! Pedro On 1 Nov 2014, at 13:11, Markus

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Markus Moeller
Hi Pedro, Did you try the –s GSS_C_NO_NAME option ? Markus Pedro Lobo pal...@gmail.com wrote in message news:94f74226-f24b-4910-95b7-b86ace815...@gmail.com... Hey Everybody, Seems as though I celebrated too soon on Saturday. Today things are back to not working for Windows 7+ machines and

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
Hi Markus Moeller, Hi Markus, Yeah, I'm currently using that option and permissions are correct too. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Markus Moeller
Hi Pedro, Can you capture the traffic from one Windows 7 on XP client on port 88 ( just after the login before access a website via squid until successful or unsuccessful accessing the website) using wireshark ? Send me the .cap files to check. Markus Pedro Lobo pal...@gmail.com wrote

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
Hi Markus, When I get in to the office tomorrow, I'll do that and send you the .cap file. Thanks for all the help so far. Pedro Lobo On 27 Oct 2014, at 20:53, Markus Moeller hua...@moeller.plus.com wrote: Hi Pedro, Can you capture the traffic from one Windows 7 on XP client on

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread Pedro Lobo
October 2014 7:26 AM To: Markus Moeller Cc: squid-us...@squid-cache.org Subject: Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed Hi Markus Moeller, Hi Markus, Yeah, I'm currently using that option and permissions are correct too

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-27 Thread John Mok
: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Pedro Lobo Sent: Tuesday, 28 October 2014 7:26 AM To: Markus Moeller Cc: squid-us...@squid-cache.org Subject: Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-25 Thread Pedro Lobo
Hi Carlos, Yeah, the Windows 7 machine is part of the domain. As for basic auth, I'll look into setting that up too, although we were hoping to forgo it entirely. On 25 Oct 2014, at 3:00, Carlos Defoe wrote: Windows 7 inside the domain? Anyway, you should configure a basic auth scheme as a

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-25 Thread Dan Charlesworth
I was recently receiving this (incredibly vague) error. Turns out my squid user didn’t have permission to read the keytab. On Sat, Oct 25, 2014 at 8:37 PM, Pedro Lobo pal...@gmail.com wrote: Hi Markus, I used msktutil to create the keytab. msktutil -c -s HTTP/proxy01tst.fake.net -h

[squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-24 Thread Pedro Lobo
Hi Squid Gurus, I'm at my wit's end and in dire need of some squid expertise. We've got a production environment with a couple of squid 2.7 servers using NTLM and basic authentication. Recently though, we decided to upgrade and I'm now setting up squid 3.3 with Kerberos and NTLM Fallback.

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-24 Thread Markus Moeller
Hi Pedro, How did you create your keytab ? What does klist –ekt squid.keytab show ( I assume you use MIT Kerberos) ? Markus Pedro Lobo pal...@gmail.com wrote in message news:40e1e0e7-50c6-4117-94aa-50b065734...@gmail.com... Hi Squid Gurus, I'm at my wit's end and in dire need of some squid

Re: [squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

2014-10-24 Thread Carlos Defoe
Windows 7 inside the domain? Anyway, you should configure a basic auth scheme as a second fallback. On Fri, Oct 24, 2014 at 9:26 PM, Markus Moeller hua...@moeller.plus.com wrote: Hi Pedro, How did you create your keytab ? What does klist –ekt squid.keytab show ( I assume you use MIT