Hi Daniel,

You need to check your client when you get an NTLM token instead of a Kerberos token. It means the client can not get the HTTP/<fqdn> token for for squid proxy. You can check this with tools like wireshark ( Check communication on port 88).

Regards
Markus


"Daniel Reif" wrote in message news:caa0zftycevc97tzfkxgw8rfl0faj-z6htomu5ttyd5nzj5p...@mail.gmail.com...

Hello guys,

I'm having problems when trying to authenticate using squid squid_kerb_auth.

In access.log only denies the request and the browser keeps requesting
credentials.

In cache.log get the following in return:

08/13/2014 16:58:27 kid1 | ERROR: Negotiate Authentication validating user.
Result: {result = BH, notes = {message: received type 1 NTLM token; }}

Has anyone faced this problem?

This is the lines on my squid.conf






*auth_param negotiate program /app/squid/libexec/squid_kerb_authauth_param
negotiate children 10auth_param negotiate keep_alive onacl authenticated
proxy_auth REQUIREDhttp_access allow authenticated*


keytab files is /app/squid/etc/HTTP.keytab
I already ran the kinit command


Att

Daniel William Reif

Reply via email to