Re: [squid-users] Re: Kerberos with AD

2012-04-15 Thread Brett Lymn
On Mon, Apr 16, 2012 at 07:05:23AM +0100, Markus Moeller wrote: > > BTW I would not recommend using ktpass and a user account. ktpass uses DES > as a default which is not anymore supported by newer MS systems and > secondly user accounts in AD have usually (depending on your AD setting) a > pa

[squid-users] Re: Kerberos with AD

2012-04-15 Thread Markus Moeller
Hi Simon, This looks like a client PC issue. Can you check with kerbtray that the client gets a TGS for HTTP/ ? If you can look at the traffic between the client and AD with wireshark you should see first an AS request from the client to AD on port 88 and when you the user opens IE and acce