<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>Hai, </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>Use winbind and never have this problem
again.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>* install winbind only is sufficient, </FONT></SPAN><SPAN
class=176222315-23032020><FONT color=#0000ff size=2 face=Arial>below works since
squid 3.2 up to 4.10</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><FONT face=Arial><FONT size=2><FONT color=#0000ff><SPAN
class=176222315-23032020>An</SPAN><SPAN class=176222315-23032020> example
of a minimal smb.conf for it. </SPAN></FONT></FONT></FONT></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>[global]<BR> # Auth-Only setup with winbind.
( no Shares )</FONT></SPAN></DIV>
<DIV> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> workgroup
= NTDOM<BR> security = ADS<BR> realm
= YOUR.REALM.TLD<BR> netbios name =
PROXY1</FONT></SPAN></DIV>
<DIV> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> preferred master = no<BR>
domain master = no<BR> host msdfs = no<BR>
dns proxy = yes</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> interfaces = IP_OR_INTERFACENAME
127.0.0.1<BR> bind interfaces only = yes</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> ### OBLIGATED PART begin
</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> ## map id's outside to domain to tdb
files.<BR> idmap config *: backend = tdb<BR>
idmap config *: range = 2000-9999</FONT></SPAN></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> ## map ids from the domain and (*) the
range may not overlap !<BR> idmap config NTDOM: backend
= rid<BR> idmap config NTDOM: range =
100000-3999999</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> kerberos method = secrets and
keytab<BR> dedicated keytab file =
/etc/krb5.keytab</FONT></SPAN></DIV>
<DIV dir=ltr align=left><FONT color=#0000ff size=2 face=Arial>
# renew the kerberos ticket<BR> winbind refresh tickets =
yes</FONT></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><SPAN
class=176222315-23032020><FONT color=#0000ff size=2
face=Arial> ### OBLIGATED PART end</FONT></SPAN></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><SPAN
class=176222315-23032020><FONT color=#0000ff size=2
face=Arial></FONT></SPAN></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> # Disable usershares create.. (
removes (unneeded ) error from the logs ) <BR>
usershare path =</FONT></SPAN></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial> # Disable printing completely ( removes
also (unneeded ) error from the logs. )<BR> load printers
= no<BR> printing = bsd<BR> printcap name =
/dev/null<BR> disable spoolss = yes</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>-- --- </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>and join the Windows domain. </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>kinit administrator<BR>net ads join -k</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>Allow the server in the AD to Delegate Kerberos for Squid. (
or all services ). thats up to you. </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial>After thats done, then </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=176222315-23032020><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV><SPAN class=176222315-23032020>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=176222315-23032020>Create </SPAN>S<SPAN class=176222315-23032020>quid
keytab: </SPAN></FONT></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=176222315-23032020>export KRB5_KTNAME=FILE:/etc/squid/HTTP-$(hostname
-s).keytab</SPAN></FONT></FONT></FONT></DIV><FONT color=#0000ff size=2
face=Arial>net ads keytab ADD HTTP/$(hostname -f)</FONT>
<DIV><FONT face=Arial><FONT color=#0000ff><FONT size=2><SPAN
class=176222315-23032020></SPAN></FONT></FONT></FONT></SPAN> </DIV>
<DIV><SPAN class=176222315-23032020><FONT color=#0000ff size=2 face=Arial>Verify
it : klist -ke /etc/squid/HTTP-$(hostname -s).keytab </FONT></SPAN></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial>unset KRB5_KTNAME</FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial></FONT> </DIV>
<DIV><SPAN class=176222315-23032020><FONT color=#0000ff size=2 face=Arial># set
rights.<BR>chgrp proxy /etc/squid/HTTP-$(hostname -s).keytab<BR>chmod g+r
/etc/squid/HTTP-$(hostname -s).keytab</FONT></SPAN></DIV>
<DIV><SPAN class=176222315-23032020><FONT color=#0000ff size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=176222315-23032020></SPAN><SPAN class=176222315-23032020><FONT
color=#0000ff size=2 face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=176222315-23032020></SPAN><FONT color=#0000ff size=2
face=Arial><SPAN class=176222315-23032020>! Optional krb5.conf ( most of the
time the default should be sufficient. </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020></SPAN></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020>[libdefaults]<BR> default_realm =
YOUR.REALM.TLD</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020><BR> ## below her is
optional.<BR> dns_lookup_kdc = true<BR>
dns_lookup_realm = false<BR> ticket_lifetime =
24h<BR> ccache_type = 4<BR> forwardable =
true<BR> proxiable = true<BR></SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020>
;https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/1484262<BR>
ignore_k5login = true</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020><BR>and the squid auth part. </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020>auth_param negotiate program
/usr/lib/squid/negotiate_wrapper_auth \<BR> --kerberos
/usr/lib/squid/negotiate_kerberos_auth -k
/etc/squid/krb5-squid-HTTP-proxy1.keytab \<BR> -s <A
href="mailto:HTTP/proxy1.your.DNSdomain.tld@YOUR.REALM.TLD">HTTP/proxy1.your.DNSdomain.tld@<FONT
color=#0000ff>YOUR.REALM.TLD</FONT></A> \<BR> --ntlm
/usr/bin/ntlm_auth --helper-protocol=gss-spnego
--domain=NTDOM<BR></SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN class=176222315-23032020>Good
luck. </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020></SPAN></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020>Greetz, </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020></SPAN></FONT> </DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020>Louis</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff size=2 face=Arial><SPAN
class=176222315-23032020> </DIV>
<DIV></SPAN></FONT> </DIV>
<DIV><BR></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV lang=nl class=OutlookMessageHeader dir=ltr align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>Van:</B> squid-users
[mailto:squid-users-bounces@lists.squid-cache.org] <B>Namens </B>Sébastien
Genesta<BR><B>Verzonden:</B> maandag 23 maart 2020 16:01<BR><B>Aan:</B>
squid-users@lists.squid-cache.org<BR><B>Onderwerp:</B> [squid-users] Squid -
Kerberos - update keytab issue<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Hi,</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>I'm
encountering an issue using Kerberos authentication. Indeed, every 30 days, my
kerberos authentication breaks.<BR style="BOX-SIZING: border-box">(currently,
to bypass this issue, I regenerate keytab file).</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Here,
the command that I run every 6h to keep my keytab up to date.</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>/usr/sbin/msktutil
--auto-update --verbose --computer-name KRB-PROX -k
/etc/squid/squid.keytab</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Below
log I have every run (when everything is ok):</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'><EM
style="BOX-SIZING: border-box">samedi 21 mars 2020, 06:00:01 (UTC+0100) --
init_password: Wiping the computer password structure --
generate_new_password: Generating a new, random password for the computer
account -- generate_new_password: Characters read from /dev/urandom = 88 --
get_dc_host: Attempting to find Domain Controller to use via DNS SRV record in
domain XXXXXX.LOCAL for procotol tcp -- get_dc_host: Found DC:
xxxxxxxxx.xxxxxxxxx.local -- get_dc_host: Canonicalizing DC through
forward/reverse lookup... -- get_dc_host: Found Domain Controller:
xxxxxxxx.xxxxxxxxxx.local -- create_fake_krb5_conf: Created a fake krb5.conf
file: /tmp/.msktkrb5.conf-ze3JWq -- reload: Reloading Kerberos Context --
finalize_exec: SAM Account Name is: KRB-PROX$ -- try_machine_keytab_princ:
Trying to authenticate for KRB-PROX$ from local keytab... --
switch_default_ccache: Using the local credential cache:
FILE:/tmp/.mskt_krb5_ccache-t1AykD -- finalize_exec: Authenticated using
method 1 -- LDAPConnection: Connecting to LDAP server:
xxxxxxxxxx.xxxxxxxxxxxxx.local -- ldap_get_base_dn: Determining default LDAP
base: dc=xxxxxxxxxxxxx,dc=LOCAL -- get_default_ou: Determining default OU:
CN=Computers,DC=xxxxxxxxxxxxxxx,DC=local -- ldap_get_pwdLastSet: pwdLastSet is
132267790228776214 -- execute: Password last set 28 days ago. -- execute:
Exiting because password was changed recently. -- ~KRB5Context: Destroying
Kerberos Context</EM></P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Below
logs when things gone bad:</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'><EM
style="BOX-SIZING: border-box">lundi 23 mars 2020, 00:00:01 (UTC+0100) --
init_password: Wiping the computer password structure --
generate_new_password: Generating a new, random password for the computer
account -- generate_new_password: Characters read from /dev/urandom = 93 --
get_dc_host: Attempting to find Domain Controller to use via DNS SRV record in
domain XXXXXX.LOCAL for procotol tcp -- get_dc_host: Found DC:
xxxxxxxxxxxx.xxxxxxxxxxx.local -- get_dc_host: Canonicalizing DC through
forward/reverse lookup... -- get_dc_host: Found Domain Controller:
xxxxxxxxxxxx.xxxxxxxxxxx.local -- create_fake_krb5_conf: Created a fake
krb5.conf file: /tmp/.msktkrb5.conf-UYDFiO -- reload: Reloading Kerberos
Context -- finalize_exec: SAM Account Name is: KRB-PROX$ --
try_machine_keytab_princ: Trying to authenticate for KRB-PROX$ from local
keytab... -- switch_default_ccache: Using the local credential cache:
FILE:/tmp/.mskt_krb5_ccache-p6KtWW -- finalize_exec: Authenticated using
method 1 -- LDAPConnection: Connecting to LDAP server:
xxxxxxxxxxxx.xxxxxxxxxxxx.local -- ldap_get_base_dn: Determining default LDAP
base: dc=xxxxxxxxxxxxxx,dc=LOCAL -- get_default_ou: Determining default OU:
CN=Computers,DC=xxxxxxxxxxxxxxx,DC=local -- ldap_get_pwdLastSet: pwdLastSet is
132267790228776214 -- execute: Password last set 30 days ago. --
ldap_check_account: Checking that a computer account for KRB-PROX$ exists --
ldap_check_account: Checking computer account - found -- ldap_check_account:
Found userAccountControl = 0x1000 -- ldap_check_account: Found
supportedEncryptionTypes = 28 -- ldap_check_account: Found dNSHostName =
xxxxxxxx.xxxxxxxxxxx.local -- ldap_check_account: Found Principal:
HTTP/xxxxxxxxxx.xxxxxxxxxxx.local -- ldap_check_account: Found User Principal:
HTTP/proxy.xxxxxxxxxxxxxxxxx.local -- ldap_check_account_strings: Inspecting
(and updating) computer account attributes --
ldap_set_supportedEncryptionTypes: No need to change
msDs-supportedEncryptionTypes they are 28 -- ldap_set_userAccountControl_flag:
Setting userAccountControl bit at 0x200000 to 0x0 --
ldap_set_userAccountControl_flag: userAccountControl not changed 0x1000 --
ldap_get_kvno: KVNO is 1 -- set_password: Attempting to reset computer's
password -- set_password: Try using keytab for KRB-PROX$ to change password --
ldap_get_pwdLastSet: pwdLastSet is 132267790228776214 -- set_password:
krb5_change_password failed using keytab: (3) Authentication error --
~KRB5Context: Destroying Kerberos Context</EM></P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'><EM
style="BOX-SIZING: border-box">lundi 23 mars 2020, 06:00:01 (UTC+0100) --
init_password: Wiping the computer password structure --
generate_new_password: Generating a new, random password for the computer
account -- generate_new_password: Characters read from /dev/urandom = 90 --
get_dc_host: Attempting to find Domain Controller to use via DNS SRV record in
domain xxxxxxxxx.LOCAL for procotol tcp -- get_dc_host: Found DC:
xxxxxxxxx.xxxxxxxxx.local -- get_dc_host: Canonicalizing DC through
forward/reverse lookup... -- get_dc_host: Found Domain Controller:
xxxxxxxxxx.xxxxxxx.local -- create_fake_krb5_conf: Created a fake krb5.conf
file: /tmp/.msktkrb5.conf-9XY0Qp -- reload: Reloading Kerberos Context --
finalize_exec: SAM Account Name is: KRB-PROX$ -- try_machine_keytab_princ:
Trying to authenticate for KRB-PROX$ from local keytab... --
try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed
(Preauthentication failed) -- try_machine_keytab_princ: Authentication with
keytab failed -- try_machine_keytab_princ: Trying to authenticate for
KRB-PROX$ from local keytab... -- try_machine_keytab_princ: Error:
krb5_get_init_creds_keytab failed (Preauthentication failed) --
try_machine_keytab_princ: Authentication with keytab failed --
try_machine_keytab_princ: Trying to authenticate for
host/xxxxxxxxxxx.xxxxxxxxxx.local from local keytab... --
try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Key table
entry not found) -- try_machine_keytab_princ: Authentication with keytab
failed -- try_machine_password: Trying to authenticate for KRB-PROX$ with
password. -- create_default_machine_password: Default machine password for
KRB-PROX$ is krb-prox -- try_machine_password: Error:
krb5_get_init_creds_keytab failed (Preauthentication failed) --
try_machine_password: Authentication with password failed -- try_user_creds:
Checking if default ticket cache has tickets... -- finalize_exec:
Authenticated using method 5 -- LDAPConnection: Connecting to LDAP server:
xxxxxxxxx.xxxxxxxxx.local -- ~KRB5Context: Destroying Kerberos
Context</EM></P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Technical
information:<BR style="BOX-SIZING: border-box">-Windows 2016 server
(Kerberos)<BR style="BOX-SIZING: border-box">-Squid 3-x<BR
style="BOX-SIZING: border-box">-msktutil version 1.0</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Thanks
for your help!</P>
<P
style='BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: -apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"; COLOR: rgb(51,51,51); MARGIN: 0px 0px 10px'>Seb</P>
<DIV>
<DIV class=gmail_signature dir=ltr data-smartmail="gmail_signature">
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<H3 style="FONT-SIZE: 16px; COLOR: rgb(0,0,0); MARGIN: 0px" color="#000000">
<TABLE
style="FONT-SIZE: small; FONT-FAMILY: Arial; FONT-WEIGHT: 400; COLOR: rgb(255,255,255)"
cellSpacing=0 cellPadding=0>
<TBODY>
<TR>
<TD>
<TABLE style="FONT-FAMILY: Arial" cellSpacing=0 cellPadding=0>
<TBODY>
<TR>
<TD style="VERTICAL-ALIGN: middle">
<P style="COLOR: rgb(0,0,0); MARGIN: 0px; LINE-HEIGHT: 20px"
color="#000000"><B>Sébastien GENESTA<BR></B></P>
<P
style="FONT-SIZE: 12px; COLOR: rgb(0,0,0); MARGIN: 0px; LINE-HEIGHT: 20px"
color="#000000">System & Network Administrator</P>
<P
style="FONT-SIZE: 12px; COLOR: rgb(0,0,0); MARGIN: 0px; LINE-HEIGHT: 20px"
color="#000000">Avis Vérifiés</P></TD>
<TD width=30>
<DIV style="WIDTH: 30px"></DIV></TD>
<TD
style="WIDTH: 1px; BORDER-BOTTOM: medium none; BORDER-LEFT: rgb(242,142,23) 1px solid"
width=1 color="#F28e17"></TD>
<TD width=30>
<DIV style="WIDTH: 30px"></DIV></TD>
<TD style="VERTICAL-ALIGN: middle">
<TABLE style="FONT-FAMILY: Arial" cellSpacing=0 cellPadding=0>
<TBODY>
<TR style="VERTICAL-ALIGN: middle" height=25>
<TD style="VERTICAL-ALIGN: middle" width=30>
<TABLE style="FONT-FAMILY: Arial" cellSpacing=0
cellPadding=0>
<TBODY>
<TR>
<TD style="VERTICAL-ALIGN: bottom"><SPAN
style="DISPLAY: block; BACKGROUND-COLOR: rgb(242,142,23)"
color="#F28e17" width="11"><IMG
style="DISPLAY: block; MARGIN-RIGHT: 0px"
src="https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/phone-icon-2x.png"
width=13 height=13 color="#F28e17"
NOSEND="1"></SPAN></TD></TR></TBODY></TABLE></TD>
<TD
style="COLOR: rgb(0,0,0); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px"><A
style="FONT-SIZE: 12px; COLOR: rgb(0,0,0)"
href="tel:+334%1325%8170" target=_blank color="#000000">+334
13 25 81 70</A><BR></TD></TR>
<TR style="VERTICAL-ALIGN: middle" height=25>
<TD style="VERTICAL-ALIGN: middle" width=30>
<TABLE style="FONT-FAMILY: Arial" cellSpacing=0
cellPadding=0>
<TBODY>
<TR>
<TD style="VERTICAL-ALIGN: bottom"><SPAN
style="DISPLAY: block; BACKGROUND-COLOR: rgb(242,142,23)"
color="#F28e17" width="11"><IMG style="DISPLAY: block"
src="https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/email-icon-2x.png"
width=13 color="#F28e17"
NOSEND="1"></SPAN></TD></TR></TBODY></TABLE></TD>
<TD
style="PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px"><A
style="FONT-SIZE: 12px; COLOR: rgb(0,0,0)"
href="mailto:sebastien@avis-verifies.com" target=_blank
color="#000000">sebastien@avis-verifies.com</A></TD></TR>
<TR style="VERTICAL-ALIGN: middle" height=25>
<TD style="VERTICAL-ALIGN: middle" width=30>
<TABLE style="FONT-FAMILY: Arial" cellSpacing=0
cellPadding=0>
<TBODY>
<TR>
<TD style="VERTICAL-ALIGN: bottom"><SPAN
style="DISPLAY: block; BACKGROUND-COLOR: rgb(242,142,23)"
color="#F28e17" width="11"><IMG style="DISPLAY: block"
src="https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/link-icon-2x.png"
width=13 color="#F28e17"
NOSEND="1"></SPAN></TD></TR></TBODY></TABLE></TD>
<TD
style="PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px"><A
style="FONT-SIZE: 12px; COLOR: rgb(0,0,0)"
href="https://www.avis-verifies.com/" target=_blank
color="#000000">www.avis-verifies.com</A></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>
<TABLE style="FONT-FAMILY: Arial; WIDTH: 422px" cellSpacing=0
cellPadding=0>
<TBODY>
<TR>
<TD height=30></TD></TR>
<TR>
<TD
style="WIDTH: 422px; BORDER-BOTTOM: rgb(242,142,23) 1px solid; BORDER-LEFT: medium none; DISPLAY: block"
height=1 color="#F28e17"></TD></TR>
<TR>
<TD height=30></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD>
<TABLE style="FONT-FAMILY: Arial; WIDTH: 422px" cellSpacing=0
cellPadding=0>
<TBODY>
<TR>
<TD style="VERTICAL-ALIGN: top"><IMG
style="MAX-WIDTH: 130px; DISPLAY: inline-block"
src="https://www.avis-verifies.com/avis-clients/widget/av_file_manager/documents_marketing/signature/Logo-FR.png"
width=130 NOSEND="1"></TD>
<TD style="VERTICAL-ALIGN: top; TEXT-ALIGN: right">
<TABLE style="FONT-FAMILY: Arial; DISPLAY: inline-block"
cellSpacing=0 cellPadding=0>
<TBODY>
<TR>
<TD><A
style="COLOR: rgb(17,85,204); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(2,136,209)"
href="https://www.facebook.com/avisverifies" target=_blank
color="#0288d1"><IMG
style="MAX-WIDTH: 135px; DISPLAY: block" alt=facebook
src="https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/facebook-icon-2x.png"
height=24 color="#0288d1" NOSEND="1"></A></TD>
<TD width=5>
<DIV></DIV></TD>
<TD><A
style="COLOR: rgb(17,85,204); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(2,136,209)"
href="https://twitter.com/avis_verifies" target=_blank
color="#0288d1"><IMG
style="MAX-WIDTH: 135px; DISPLAY: block" alt=twitter
src="https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/twitter-icon-2x.png"
height=24 color="#0288d1" NOSEND="1"></A></TD>
<TD width=5>
<DIV></DIV></TD>
<TD><A
style="COLOR: rgb(17,85,204); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; DISPLAY: inline-block; PADDING-RIGHT: 0px; BACKGROUND-COLOR: rgb(2,136,209)"
href="https://fr.linkedin.com/showcase/avis-v%C3%A9rifi%C3%A9s"
target=_blank color="#0288d1"><IMG
style="MAX-WIDTH: 135px; DISPLAY: block" alt=linkedin
src="https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/linkedin-icon-2x.png"
height=24 color="#0288d1" NOSEND="1"></A></TD>
<TD width=5>
<DIV></DIV></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD height=30></TD></TR>
<TR>
<TD style="TEXT-ALIGN: center"><BR></TD></TR></TBODY></TABLE></H3>
<H2
style="FONT-SIZE: 10.5pt; FONT-FAMILY: serif; COLOR: rgb(252,146,2); MARGIN: 0px">
<DIV></DIV></H2>
<H2
style="FONT-SIZE: 10.5pt; FONT-FAMILY: serif; COLOR: rgb(252,146,2); MARGIN: 0px"><A
style="COLOR: rgb(17,85,204)"
href="https://www.avis-verifies.com/api.php?action=act_api_redirection_signature&locale=fr&type=url"
target=_blank><IMG
style="FONT-SIZE: small; FONT-FAMILY: Arial,Helvetica,sans-serif; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); MARGIN-RIGHT: 0px"
alt=https://www.avis-verifies.com/api.php?action=act_api_redirection_signature&locale=fr&type=url
src="http://www.avis-verifies.com/api.php?action=act_api_redirection_signature&locale=fr&type=img"
width=409 height=83
NOSEND="1"></A></H2></DIV></DIV></DIV></DIV></DIV></DIV></BLOCKQUOTE></BODY></HTML>