<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1498581512624_34770">I appreciate the input. Do you (or anyone else) know if keytab is required in a windows only environment for kerberos authentication?</div><div class="qtdSeparateBR" id="yui_3_16_0_1_1498581512624_34785"><br><br></div><div class="yahoo_quoted" id="yui_3_16_0_1_1498581512624_34830" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1498581512624_34829"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" id="yui_3_16_0_1_1498581512624_34828"> <div dir="ltr" id="yui_3_16_0_1_1498581512624_34827"> <font size="2" face="Arial" id="yui_3_16_0_1_1498581512624_34826"> <hr size="1" id="yui_3_16_0_1_1498581512624_34825"> <b><span style="font-weight:bold;">From:</span></b> Amos Jeffries <squid3@treenet.co.nz><br> <b><span style="font-weight: bold;">To:</span></b> Todd Pearson <rtpearson@yahoo.com>; "squid-users@lists.squid-cache.org" <squid-users@lists.squid-cache.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, June 27, 2017 10:37 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [squid-users] NTLM authentication worked in Squid 2.7.STABLE8 Squid Web Proxy, now need it in v3.5 hosted on Windows server 2k12<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_1_1498581512624_34846"><br><div dir="ltr" id="yui_3_16_0_1_1498581512624_34845">On 28/06/17 05:12, Todd Pearson wrote:<br clear="none">> <br clear="none">> Thank you for the information. Is there any place to download the <br clear="none">> helper binaries for NTLM? Or do I need to build them myself?<br clear="none">> <br clear="none"><br clear="none">Since you were using the SSPI helper for NTLM you should have the <br clear="none">Negotiate/Kerberos equivalent already. It is mswin_sspi in Squid-2 or <br clear="none">negotiate_sspi_auth in Squid-3.2+. The group checking helpers work with <br clear="none">both auth types.<br clear="none"><br clear="none">Diladele provide Squid-3 builds for Windows <br clear="none">(<<a shape="rect" href="http://squid.diladele.com/" target="_blank">http://squid.diladele.com/</a>>) if you are still going that way.<br clear="none"><br clear="none"><br clear="none">> Is there additional information on kerberos configuration in a windows <br clear="none">> environment. Trying to wrap my head around the keytab and creation of <br clear="none">> it in a windows only environment.<br clear="none"><br clear="none"><br clear="none">This may be of help understanding what the Kerberos process is:<br clear="none"><<a shape="rect" href="http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos" target="_blank" id="yui_3_16_0_1_1498581512624_34847">http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos</a>><br clear="none"><br clear="none">though the config examples and setup commands we have are all for <br clear="none">non-Windows Squid machines it seems.<br clear="none"><br clear="none"><br clear="none">PS. I don't use Windows Squid servers myself, so cant be much help here. <br clear="none">Maybe someone more familiar can help out.<div class="yqt8845202487" id="yqtfd94981"><br clear="none"><br clear="none">Amos<br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>