[squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

Markus Moeller huaraz at moeller.plus.com
Tue Oct 7 22:03:11 UTC 2014


Hi Victor,

  In the helpers/negotiate_auth/kerberos directory is a script 
test_negotiate_auth.sh to test authentication outside of squid. Change dir 
to your binary directory and do the following ( please adapt to your 
environment):

> export KRB5_KTNAME=squid-win.keytab
> kinit mm at WIN2003R2.HOME
Password for mm at WIN2003R2.HOME:
markus at opensuse12:/tmp> ./test_negotiate_auth.sh opensuse12.suse.home
negotiate_kerberos_auth.cc(218): pid=29699 :2014/10/07 22:59:56| 
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
negotiate_kerberos_auth.cc(264): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: DEBUG: Got 'YR 
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' 
from squid (length: 1683).
negotiate_kerberos_auth.cc(317): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: DEBUG: Decode 
'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' 
(decoded length: 1260).
negotiate_kerberos_pac.cc(382): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: INFO: Got PAC data of lengh 480
negotiate_kerberos_pac.cc(200): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: INFO: Found 4 rids
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: Info: Got rid: 1108
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: Info: Got rid: 513
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: Info: Got rid: 1132
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: Info: Got rid: 1209
negotiate_kerberos_pac.cc(269): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: INFO: Got DomainLogonId 
S-1-5-21-1828870822-1098772068-2592627279
negotiate_kerberos_pac.cc(291): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: INFO: Found 1 ExtraSIDs
negotiate_kerberos_pac.cc(339): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: INFO: Got ExtraSid 
S-1-5-21-1828870822-1098772068-2592627279-1107
negotiate_kerberos_pac.cc(462): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: INFO: Read 480 of 480 bytes
negotiate_kerberos_auth.cc(432): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: DEBUG: Groups 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaVAQAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaAQIAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiabAQAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiauQQAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaUwQAAA==
AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== mm at WIN2003R2.HOME 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaVAQAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaAQIAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiabAQAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiauQQAAA== 
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaUwQAAA==
negotiate_kerberos_auth.cc(437): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: DEBUG: AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== 
mm at WIN2003R2.HOME
negotiate_kerberos_auth.cc(264): pid=29699 :2014/10/07 22:59:57| 
negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
BH quit command

Let me know what you get. BTW on which platform with which Kerberos 
library( MIT or Heimdal)  is this ?

Markus



"Victor Sudakov"  wrote in message 
news:20141007083542.GA60425 at admin.sibptus.tomsk.ru...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

And my Kerberos server setup seems valid:

$ setenv KRB5_KTNAME /usr/local/etc/squid/squid.keytab
$ setenv KRB5_CONFIG /usr/local/etc/squid/krb5.conf
$ kdestroy
$ kinit -t $KRB5_KTNAME  HTTP/proxy.sibptus.transneft.ru
$ klist
Credentials cache: FILE:/tmp/krb5cc_Ld5uU9
        Principal:
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU

  Issued           Expires          Principal
Oct  7 15:33:42  Oct  8 01:33:42
krbtgt/SIBPTUS.TRANSNEFT.RU at SIBPTUS.TRANSNEFT.RU
$



Victor Sudakov wrote:
> Victor Sudakov wrote:
> > > Well, I have tried negotiate_kerberos_auth with Firefox (Windows)
> >
> > I have tried the same with MSIE 8 (Windows).
>
> After some adjustment to domain group policies, the Windows host is
> at last requesting and successfully receiving the ticket for the proxy
> service.  Wireshark output:
>
> User Datagram Protocol, Src Port: kerberos (88), Dst Port: dellpwrappks 
> (1266)
> Kerberos TGS-REP
>     Pvno: 5
>     MSG Type: TGS-REP (13)
>     Client Realm: SIBPTUS.TRANSNEFT.RU
>     Client Name (Principal): vas-adm
>     Ticket
>         Tkt-vno: 5
>         Realm: SIBPTUS.TRANSNEFT.RU
>         Server Name (Service and Instance): 
> HTTP/proxy.sibptus.transneft.ru
>         enc-part rc4-hmac
>             Encryption type: rc4-hmac (23)
>             enc-part: 3e0fc357a26db7dcdb0a5b6436b56f9c96d15ad7626eea08...
>     enc-part rc4-hmac
>         Encryption type: rc4-hmac (23)
>         Kvno: 1
>         enc-part: db8c9ea1bf85c4bb5005103765767b692ed3c0f247c23d48...
>
> The corresponding Kerberos principal is put into the keytab:
> /usr/local/etc/squid/squid.keytab:
>
> Vno  Type                     Principal
>   1  des-cbc-crc 
> HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
>   1  des-cbc-md5 
> HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
>   1  arcfour-hmac-md5 
> HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
>   1  aes256-cts-hmac-sha1-96 
> HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
>   1  aes128-cts-hmac-sha1-96 
> HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
>
> The permissions on the keytab are correct. Squid receives it via the
> environment:
>
> env KRB5_KTNAME=/usr/local/etc/squid/squid.keytab \
>         KRB5_CONFIG=/usr/local/etc/squid/krb5.conf \
>         squid -f /usr/local/etc/squid/squid-test.conf
>
> However, then actual autthentication begins, it fails with the:
> "ERROR: gss_acquire_cred() failed:  No credentials were
> supplied, or the credentials were unavailable or inaccessible..
> unknown mech-code 0 for mech unknown"
>
> If someone finds something familiar in the below debug output, or can
> low-level debug actual kerberos, could you please let me know. Thanks
> a lot in advance for any help.
>
> negotiate_kerberos_auth.cc(212): pid=40984 :2014/10/07 13:12:08| 
> negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
> negotiate_kerberos_auth.cc(258): pid=40980 :2014/10/07 13:12:37| 
> negotiate_kerberos_auth: DEBUG: Got 'YR 
> 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' 
> from squid (length: 1747).
> negotiate_kerberos_auth.cc(311): pid=40980 :2014/10/07 13:12:37| 
> negotiate_kerberos_auth: DEBUG: Decode 
> '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' 
> (decoded length: 1308).
> negotiate_kerberos_auth.cc(128): pid=40980 :2014/10/07 13:12:37| 
> negotiate_kerberos_auth: ERROR: gss_acquire_cred() failed:  No credentials 
> were supplied, or the credentials were unavailable or inaccessible.. 
> unknown mech-code 0 for mech unknown
> 2014/10/07 13:12:37 kid1| ERROR: Negotiate Authentication validating user. 
> Result: {result=BH, notes={message: gss_acquire_cred() failed:  No 
> credentials were supplied, or the credentials were unavailable or 
> inaccessible.. unknown mech-code 0 for mech unknown; }}
>
> -- 
> Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
> sip:sudakov at sibptus.tomsk.ru

> negotiate_kerberos_auth.cc(212): pid=40984 :2014/10/07 13:12:08| 
> negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
> negotiate_kerberos_auth.cc(258): pid=40980 :2014/10/07 13:12:37| 
> negotiate_kerberos_auth: DEBUG: Got 'YR 
> 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' 
> from squid (length: 1747).
> negotiate_kerberos_auth.cc(311): pid=40980 :2014/10/07 13:12:37| 
> negotiate_kerberos_auth: DEBUG: Decode 
> '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' 
> (decoded length: 1308).
> negotiate_kerberos_auth.cc(128): pid=40980 :2014/10/07 13:12:37| 
> negotiate_kerberos_auth: ERROR: gss_acquire_cred() failed:  No credentials 
> were supplied, or the credentials were unavailable or inaccessible.. 
> unknown mech-code 0 for mech unknown
> 2014/10/07 13:12:37 kid1| ERROR: Negotiate Authentication validating user. 
> Result: {result=BH, notes={message: gss_acquire_cred() failed:  No 
> credentials were supplied, or the credentials were unavailable or 
> inaccessible.. unknown mech-code 0 for mech unknown; }}

> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users


- -- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUM6XeAAoJEA2k8lmbXsY0shEH/3k0EU+0PGD1iSx2OLqbkhGv
Z38OUous3LXoxpvOTSTP5mp+jVzutKBUlzqZbo5M0qNPg+WovNtDF2bqPK09scy8
Wuf+zfZv8YXQIvMemLXsnWZkIivLQ8Tgi6nAhX5fewP6zIfjRPMgqr86+ihHYZs4
HfO1IceZkitgeJx+9VvWDrRRDYIikTkXDLssfjFH+2J++tJikDWLqxoXykXTRRR3
xWNHomrRCxHw0q4KixCgefEnUDThvAK6MRnQA57t6xnTXiSTbqMSvkagLFgTLo87
OKI3ex+nVgyax1JZHJy1oOqXYJIeex+KxcLKkEzvXL9mdEUPgiJLg8FJD7rSDHE=
=hOY8
-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users 




More information about the squid-users mailing list