Hi,
If I understand correctly, you've created a account for all squid and one
for balance service, and you've associated the SPN of balance service for
all squid account. Is this correct? Aren't there problems with ducplicat SPN
in AD?
A lot of thanks.
--
View this message in context:
Hi,
FYI ... I got the two squids working behind the (Kemp) load balancer
with kerberos auth
Procedure:
0. myproxy.vptt.ch points to the IP of the load balancer. This is
referenced in wpad.dat or browser settings. Squid runs on port 80, so
the URL of the proxy is http://myproxy.ch:80
1. create
Markus,
The klist outputs are further below, but I have the feeling that is
not the problem, that the solution needs to be different (after
reading the following articles).
See for example:
the thing to watch out for is that AD will fail to return a ticket if
the SPN requested is found on more
On Thu, Mar 14, 2013 at 05:10:23PM +0100, Sean Boran wrote:
See for example:
the thing to watch out for is that AD will fail to return a ticket if
the SPN requested is found on more than one account (because it
doesn't know which account to use). So be careful that you do not
accidentally
Hi Sean,
Can you do a klist -ekt squid.keytab on both squid servers and send me
the output ? I assume you are missing entries.
Markus
Sean Boran s...@boran.com wrote in message
news:CAOnghjtWpc0fPBVVB=yf3beglgfrrf1jqoxlzvbfhuhbvyl...@mail.gmail.com...
(sorry for the slow answer, an