Hi,

For the log can not see any connection against the Active Directory on port 88 (kerberos, right). Attached is the. pcap. I did the configuration of firefox as below

firefox set variables as follows:

network.negotiate-auth.delegation-uris=vialactea.corp
network.negotiate-auth.trusted-uris= vialactea.corp

where vialactea.corp is the domain of the Active Directory. I tried in IE but he keeps asking for login and password infinitely

Regards

On 05/29/2011 09:39 AM, Markus Moeller wrote:
Hi,

The squid log file says that the client could not use Kerberos and fell back to NTLM.

Can you capture the traffic from the client to the proxy and to your Kerberos servers (e.g. active directory) with wireshark and send me the cap file (if not too big) ?

Markus

Attachment: log_squid3.pcap
Description: application/cap

Reply via email to