Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-21 Thread Fabio Bucci
apologize for my mail... Fabio 2016-01-14 6:09 GMT+01:00 LYMN : > On Wed, Jan 13, 2016 at 09:30:46AM +0100, Fabio Bucci wrote: >> Hi All, >> i want to terminate a previous job did by ex colleague is changed >> company. Now there is a cluster of 2 nodes of squid with

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-13 Thread Fabio Bucci
Hi All, i want to terminate a previous job did by ex colleague is changed company. Now there is a cluster of 2 nodes of squid with NTLM transparent authentication and one spare node i'm using as test and configured with kerberos instead. Reading a lot of info i understood kerberos is more stable

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-13 Thread LYMN
On Wed, Jan 13, 2016 at 09:30:46AM +0100, Fabio Bucci wrote: > Hi All, > i want to terminate a previous job did by ex colleague is changed > company. Now there is a cluster of 2 nodes of squid with NTLM > transparent authentication and one spare node i'm using as test and > configured with

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-11 Thread LYMN
On Mon, Jan 11, 2016 at 09:06:27PM +1300, Amos Jeffries wrote: > On 11/01/2016 2:48 p.m., LYMN wrote: > > > > I did manage to get this working, you did mention the correct solution > > right down the end of your message. > > > > Correct for you yes. That can happen when making half-blind guesses

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-11 Thread Amos Jeffries
On 11/01/2016 2:48 p.m., LYMN wrote: > > I did manage to get this working, you did mention the correct solution > right down the end of your message. > Correct for you yes. That can happen when making half-blind guesses at what the problem actually is based on partial information. It might have

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-10 Thread LYMN
Firstly, let me say that whatever you are using for a mail client makes reading/replying to your message difficult (see below for a small sample, I will clean up the rest as best I can)... I did manage to get this working, you did mention the correct solution right down the end of your message.

[squid-users] kerberos authentication with a machine account doesn't work

2016-01-06 Thread LYMN
Hi, We have been using kerberos authentication against Active Directory here for a long time by using a SPN attached to a user account and exporting the keytab. The issue we have is that security policy mandates that the password on the user account be changed which means we have to go and