Re: [squid-users] Re: squid_kerb_auth on mac os x

2008-06-27 Thread Brian Kirk
I am going through a simular nightmare in our environment, we currently use NTLM auth and since we have over 6000 Internet users this isn't very efficent. I can't get kerberos to work. I used the ./squid_kerb_auth_test program to generate the blob, and it is over 5000 characters long. The

Re: [squid-users] Re: squid_kerb_auth on mac os x

2008-06-11 Thread Henrik Nordstrom
On mån, 2008-06-09 at 10:02 -0700, Alex Morken wrote: I now believe the issue has to do with squid configuration. I have not been able to get any indication that it is even trying kerberos - it is just using the basic auth method. I am going to strip down my squid config to the basics

Re: [squid-users] Re: squid_kerb_auth on mac os x

2008-06-09 Thread Alex Morken
Markus, On Jun 7, 2008, at 2:55 PM, Markus Moeller wrote: Find below a small test program to create a token. Run a kinit as a user and then ./squid_kerb_auth_test proxy_fqdn. It creates a token like: Thank you for the little program, I will test my set up today to see if it is taking

[squid-users] Re: squid_kerb_auth on mac os x

2008-06-07 Thread Markus Moeller
Find below a small test program to create a token. Run a kinit as a user and then ./squid_kerb_auth_test proxy_fqdn. It creates a token like: ./squid_kerb_auth_test opensuse.suse.home Token:

[squid-users] Re: squid_kerb_auth on mac os x

2008-06-07 Thread Markus Moeller
Alex, what Kerberos version do you use ? I think Mac uses MIT 1.4.1 which does not support spnego as far as I recall. So in your compile don't use -DHAVE_SPNEGO. Markus Alex Morken [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, This is the first time I have posted on

[squid-users] Re: squid_kerb_auth on mac os x

2008-06-06 Thread Markus Moeller
I can create a simple test tool to create blobs. I will post it later next week. Markus Henrik Nordstrom [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] On ons, 2008-06-04 at 15:41 -0700, Alex Morken wrote: Thank you Henrik. I kind of figured it needed something else, but I

Re: [squid-users] Re: squid_kerb_auth on mac os x

2008-06-06 Thread Alex Morken
On Jun 6, 2008, at 2:19 PM, Markus Moeller wrote: I can create a simple test tool to create blobs. I will post it later next week. Markus Henrik Nordstrom [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] On ons, 2008-06-04 at 15:41 -0700, Alex Morken wrote: Thank you Henrik.

Re: [squid-users] Re: squid_kerb_auth on mac os x

2008-06-06 Thread Henrik Nordstrom
On fre, 2008-06-06 at 14:33 -0700, Alex Morken wrote: I have done a bit more testing and shut off my ldap authentication and it seems that it still trying to use the basic auth. I have shut squid completely down and restarted each time I change auth methods per the documentation. How

Re: [squid-users] Re: squid_kerb_auth on mac os x

2008-06-06 Thread Alex Morken
On Jun 6, 2008, at 2:55 PM, Henrik Nordstrom wrote: On fre, 2008-06-06 at 14:33 -0700, Alex Morken wrote: I have done a bit more testing and shut off my ldap authentication and it seems that it still trying to use the basic auth. I have shut squid completely down and restarted each time I

[squid-users] Re: squid_kerb_auth on mac os x

2008-06-06 Thread Markus Moeller
BTW If you download the cvs source from sourceforge at http://squidkerbauth.cvs.sourceforge.net/squidkerbauth you can use ./configure and it should check everything for Mac Markus Alex Morken [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello, This is the first time I have