Re: Fwd: [squid-users] Re: Re: kerberos auth failing behind a load balancer

2013-05-22 Thread SPG
Hi, If I understand correctly, you've created a account for all squid and one for balance service, and you've associated the SPN of balance service for all squid account. Is this correct? Aren't there problems with ducplicat SPN in AD? A lot of thanks. -- View this message in context:

Fwd: [squid-users] Re: Re: kerberos auth failing behind a load balancer

2013-03-26 Thread Sean Boran
Hi, FYI ... I got the two squids working behind the (Kemp) load balancer with kerberos auth Procedure: 0. myproxy.vptt.ch points to the IP of the load balancer. This is referenced in wpad.dat or browser settings. Squid runs on port 80, so the URL of the proxy is http://myproxy.ch:80 1. create

Re: [squid-users] Re: Re: kerberos auth failing behind a load balancer

2013-03-14 Thread Sean Boran
Markus, The klist outputs are further below, but I have the feeling that is not the problem, that the solution needs to be different (after reading the following articles). See for example: the thing to watch out for is that AD will fail to return a ticket if the SPN requested is found on more

Re: [squid-users] Re: Re: kerberos auth failing behind a load balancer

2013-03-14 Thread Brett Lymn
On Thu, Mar 14, 2013 at 05:10:23PM +0100, Sean Boran wrote: See for example: the thing to watch out for is that AD will fail to return a ticket if the SPN requested is found on more than one account (because it doesn't know which account to use). So be careful that you do not accidentally

[squid-users] Re: Re: kerberos auth failing behind a load balancer

2013-03-13 Thread Markus Moeller
Hi Sean, Can you do a klist -ekt squid.keytab on both squid servers and send me the output ? I assume you are missing entries. Markus Sean Boran s...@boran.com wrote in message news:CAOnghjtWpc0fPBVVB=yf3beglgfrrf1jqoxlzvbfhuhbvyl...@mail.gmail.com... (sorry for the slow answer, an