[squid-users] Kerberos authentication problem - squid 3.4.11

Ludovit Koren ludovit.koren at gmail.com
Tue Feb 10 07:45:36 UTC 2015


>>>>> Markus Moeller <huaraz at moeller.plus.com> writes:

    > Hi Ludovit,
    >  I haven't seen that error before either, but when you test you sould
    > have your own user credentials in the cache.  You should use kinit
    > <user>@MDPT.LOCAL and then try again the test. is the hostname
    > correctly set to squid1.mdpt.local ? If not try

    >   /usr/local/libexec/squid/negotiate_kerberos_auth_test
    > squid1.mdpt.local | awk '{sub(/Token:/,"YR"); print $0}END{print
    > "QQ"}' | /usr/local/libexec/squid/negotiate_kerberos_auth -r -s
    > GSS_C_NO_NAME


Hello,

still no progress...


# klist 
Credentials cache: FILE:/tmp/krb5cc_0
        Principal: xkoren at MDPT.LOCAL

  Issued                Expires               Principal
Feb 10 08:41:06 2015  Feb 10 18:41:06 2015  krbtgt/MDPT.LOCAL at MDPT.LOCAL
Feb 10 08:42:17 2015  Feb 10 18:41:06 2015  HTTP/squid1.mdpt.local at MDPT.LOCAL

# hostname
squid1.mdpt.local

# /usr/local/libexec/squid/negotiate_kerberos_auth_test squid1.mdpt.local | awk '{sub(/Token:/,"YR"); print $0}END{print "QQ"}' | /usr/local/libexec/squid/otiate_kerberos_auth -r -s HTTP/squid1.mdpt.local
BH gss_accept_sec_context() failed:  Miscellaneous failure (see text). unknown mech-code 2529639093 for mech unknown
BH quit command

# /usr/local/libexec/squid/negotiate_kerberos_auth_test squid1.mdpt.local | awk '{sub(/Token:/,"YR"); print $0}END{print "}' | /usr/local/libexec/squid/negotiate_kerberos_auth -r -s GSS_C_NO_NAME
BH gss_accept_sec_context() failed:  Miscellaneous failure (see text). unknown mech-code 2529639094 for mech unknown
BH quit command

regards,

lk


More information about the squid-users mailing list