<html><head></head><body>Only users that can't use the proxy need to do it.<br><br><div class="gmail_quote">Am 5. Februar 2018 17:43:58 MEZ schrieb Enrico Heine <flashdown@data-core.org>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
This is maybe because the users have a old kerberos ticket and need to renew it. So simple solution for them is to log off and logon again to their windows PC or they can close the browsers and tools that need to authenticate against the proxy afterwards they should lock and directly unlock their station --> this will force windows to refresh their kerberos ticket. After all did it these messages will disappear, sometimes it's easier to tell the users to just restart their PC. <br><br><div class="gmail_quote">Am 5. Februar 2018 17:09:04 MEZ schrieb erdosain9 <erdosain9@gmail.com>:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">Ok. <br>Thanks<br><br>Know the ticket is fine, and is working (people are going throug internet<br>and i see in access.log there user names).... but... im having this error in<br>the log.<br><br>2018/02/05 12:56:46 kid1| ERROR: Negotiate Authentication validating user.<br>Result: {result=BH, notes={message: gss_accept_sec_context() failed:<br>Unspecified GSS failure. Minor code may provide more information. Cannot<br>decrypt ticket for HTTP/squid.domain.lan-DOMAIN.LAN using keytab key for<br>HTTP/squid.domain.lan-DOMAIN.LAN; }}<br>2018/02/05 12:57:55 kid1| ERROR: Negotiate Authentication validating user.<br>Result: {result=BH, notes={message: gss_accept_sec_context() failed:<br>Unspecified GSS failure. Minor code may provide more information. Cannot<br>decrypt ticket for HTTP/squid.domain.lan-DOMAIN.LAN using keytab key for<br>HTTP/squid.domain.lan-DOMAIN.LAN; }}<br>(END)<br><br>I change @ for - <br><br>Thanks.<br><br><br><br>--<br>Sent from: <a href="http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html">http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html</a><br><hr><br>squid-users mailing list<br>squid-users@lists.squid-cache.org<br><a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br></pre></blockquote></div></blockquote></div><br>
-- <br>
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.</body></html>