Referencing that "Kerberos-load-balancer-and-AD" thread, yes it does work :-).
A user is created in AD, and an SPN with the lB FQDN points to that user.
That user is then used to create the keytab on each proxy.
Sean
On 22 May 2013 22:41, SPG wrote:
> Hi,
>
> then, with this option you don't nee
Hi,
then, with this option you don't need create an account for all squids
servers and duplicate spn in each account of squid. Only need a account for
load balancer service. I question it, because I read this post in the
morning and I have doubts . Is it true?
http://squid-web-proxy-cache.101909
In addition you need to add an option to squid_kerb_auth -s GSS_C_NO_NAME
otherwise the module will expect a HTTP/
Markus
"SPG" wrote in message
news:1369208281267-4660187.p...@n4.nabble.com...
Hi,
I've read a lot of post about kerberos and load balancers, but I don't have
clear the config