I don't know why, but authenticating in the IE login dialog using kerberos
credentials works now (u...@realm.com, same as for FF).
For most of the page requests, squid writes to cache.log logs as the
following:
2010/09/29 11:19:50| squid_kerb_auth: Got 'YR
So, I set the following in about:config (Firefox):
*network.auth.use-sspi: false
*network.negotiate-auth.gsslib: C:\Program
Files\MIT\Kerberos\bin\gssapi32.dll
*network.negotiate-auth.using-native-gsslib: false
Then I got in /var/log/squid/cache.log:
squid_kerb_auth: gss_acquire_cred()
I want to say that in IE 8 (the only version I used for the proxy), I get a
login prompt.
Are the XP users defined in the Kerberos server ?
Markus
No. I just want to authenticate using the ticket I created. Is this not
possible?
Did you configure Firefox to use the MIT gss library using
Hi,
I have a simple configuration of Squid, with a acl to deny access to users
that aren't authenticated. I have setup kerberos correctly as the squid
server ask tickets. There is no AD, just a kerberos server, squid server and
Windows XP clients. The Windows client uses Network Identity Manager
