<div dir="ltr"><div><div><div><div><div><div>Hi<br><br></div>i test a authentification AD with Kerberos/Ntlm<br><br>### negotiate kerberos and ntlm authentication<br>auth_param negotiate program /usr/local/bin/negotiate_wrapper --ntlm /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp --kerberos /usr/lib64/squid/squid_kerb_auth -d -s GSS_C_NO_NAME<br>auth_param negotiate children 160 startup=5 idle=1<br>auth_param negotiate keep_alive on<br><br>## Module d'authentification NTLM<br>auth_param ntlm program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-ntlmssp<br>auth_param ntlm children 160 startup=5 idle=1<br>auth_param ntlm keep_alive on<br><br>## Si echec du NTLM proposer la fenetre d'authentification<br>auth_param basic program /usr/bin/ntlm_auth --diagnostics --helper-protocol=squid-2.5-basic<br>auth_param basic children 40 startup=5 idle=1<br>auth_param basic realm Company proxy-caching web server<br>auth_param basic credentialsttl 2 hours<br><br><br></div>i have a lot of user that works, but for other user, squid request Login/pass in loop.<br><br></div>In cache.log i have:<br><br>2015/11/02 17:37:57| squid_kerb_auth: gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error<br>2015/11/02 17:37:57 kid1| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error'<br>GENSEC login failed: NT_STATUS_LOGON_FAILURE<br>2015/11/02 17:37:58| squid_kerb_auth: Got 'YR YIGeBgYrBgEFBQKggZMwgZCgGjAYBgorBgEEAYI3AgIeBgorBgEEAYI3AgIKonIEcE5FR09FWFRTAAAAAAAAAABgAAAAcAAAABD2TDMmE65PuY40xQyAIQkc4CPX0n9fiYI+rHtnnNWVARKVDNO+QYYUNvc7LgBDuwAAAAAAAAAAYAAAAAEAAAAAAAAAAAAAAEVyfDIyRYtIv9kqa6BepAo=' from squid (length: 219).<br>2015/11/02 17:37:58| squid_kerb_auth: Decode 'YIGeBgYrBgEFBQKggZMwgZCgGjAYBgorBgEEAYI3AgIeBgorBgEEAYI3AgIKonIEcE5FR09FWFRTAAAAAAAAAABgAAAAcAAAABD2TDMmE65PuY40xQyAIQkc4CPX0n9fiYI+rHtnnNWVARKVDNO+QYYUNvc7LgBDuwAAAAAAAAAAYAAAAAEAAAAAAAAAAAAAAEVyfDIyRYtIv9kqa6BepAo=' (decoded length: 161).<br>2015/11/02 17:37:58| squid_kerb_auth: gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error<br>2015/11/02 17:37:58 kid1| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error'<br>2015/11/02 17:37:58| squid_kerb_auth: Got 'YR YIGeBgYrBgEFBQKggZMwgZCgGjAYBgorBgEEAYI3AgIeBgorBgEEAYI3AgIKonIEcE5FR09FWFRTAAAAAAAAAABgAAAAcAAAABH2TDMmE65PuY40xQyAIQlCKZmWETDY7iZgTnIeQF9VidD8h6SKLzwap1w7iI5lcwAAAAAAAAAAYAAAAAEAAAAAAAAAAAAAAEVyfDIyRYtIv9kqa6BepAo=' from squid (length: 219).<br>2015/11/02 17:37:58| squid_kerb_auth: Decode 'YIGeBgYrBgEFBQKggZMwgZCgGjAYBgorBgEEAYI3AgIeBgorBgEEAYI3AgIKonIEcE5FR09FWFRTAAAAAAAAAABgAAAAcAAAABH2TDMmE65PuY40xQyAIQlCKZmWETDY7iZgTnIeQF9VidD8h6SKLzwap1w7iI5lcwAAAAAAAAAAYAAAAAEAAAAAAAAAAAAAAEVyfDIyRYtIv9kqa6BepAo=' (decoded length: 161).<br>2015/11/02 17:37:58| squid_kerb_auth: gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error<br>2015/11/02 17:37:58 kid1| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error'<br>2015/11/02 17:37:58| squid_kerb_auth: Got 'YR YIGeBgYrBgEFBQKggZMwgZCgGjAYBgorBgEEAYI3AgIeBgorBgEEAYI3AgIKonIEcE5FR09FWFRTAAAAAAAAAABgAAAAcAAAABL2TDMmE65PuY40xQyAIQlOCybIQKGs/hmFlEu3FzYMQIag5ivNn4JcpRWBrJ5vMwAAAAAAAAAAYAAAAAEAAAAAAAAAAAAAAEVyfDIyRYtIv9kqa6BepAo=' from squid (length: 219).<br>2015/11/02 17:37:58| squid_kerb_auth: Decode 'YIGeBgYrBgEFBQKggZMwgZCgGjAYBgorBgEEAYI3AgIeBgorBgEEAYI3AgIKonIEcE5FR09FWFRTAAAAAAAAAABgAAAAcAAAABL2TDMmE65PuY40xQyAIQlOCybIQKGs/hmFlEu3FzYMQIag5ivNn4JcpRWBrJ5vMwAAAAAAAAAAYAAAAAEAAAAAAAAAAAAAAEVyfDIyRYtIv9kqa6BepAo=' (decoded length: 161).<br>2015/11/02 17:37:58| squid_kerb_auth: gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error<br>2015/11/02 17:37:58 kid1| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error'<br>GENSEC login failed: NT_STATUS_LOGON_FAILURE<br>GENSEC login failed: NT_STATUS_LOGON_FAILURE<br><br><br><br><br></div>anyone know this problems ?<br><br></div>regards<br></div>Olivier<br><br><div><div><div><br></div></div></div></div>