[squid-users] Squid - AD kerberos auth and Linux Server proxy access not working

[Antony Stone]

On Tuesday 04 October 2016 at 12:28:44, Nilesh Gavali wrote:

> Hello Antony;
> I have double checked the current working configuration of my squid.conf
> and it has same settings which I posted earlier. somehow it is working for
> us.

I'm not saying the whole thing won't work; I'm saying there is no point in 
having a line "http_access allow ad_auth" following the line "http_access deny 
all".  The ad_auth line can never be invoked.

> below is the error from access.log file.
> 
> 1475518342.279      0 10.xx.15.103 TCP_DENIED/407 3589 CONNECT
> vseries-test.bottomline.com:443 - NONE/- text/html

Error 407 is "proxy auth required", so the proxy is expecting authentication 
for some reason.

Can you confirm that the hostname vseries-test.bottomline.com is contained in 
your site file /etc/squid/sitelist/dbs_allowed_site ?

Can you temporarily change the line "http_access allow IWCCP01 allowedsite" to 
"http_access allow IWCCP01" and see whether the machine then gets access?


Antony.

-- 
+++ Divide By Cucumber Error.  Please Reinstall Universe And Reboot +++

                                                   Please reply to the list;
                                                         please *don't* CC me.