[squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

[Victor Sudakov]

Victor Sudakov wrote:
> Rafael Akchurin wrote:
> > I believe I do (but you made me doubt:)
> > 
> 
> Well, I have tried negotiate_kerberos_auth with Firefox (Windows) 

I have tried the same with MSIE 8 (Windows).

It's obviously trying to do NTLM instead of Kerberos (see below). How
do I enable Kerberos proxy auth in MSIE? Is there a registry setting
or what?

Log:

negotiate_kerberos_auth.cc(258): pid=81563 :2014/10/06 11:46:33| negotiate_kerberos_auth: DEBUG: Got 'YR TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==' from squid (length: 59).
negotiate_kerberos_auth.cc(311): pid=81563 :2014/10/06 11:46:33| negotiate_kerberos_auth: DEBUG: Decode 'TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==' (decoded length: 40).
negotiate_kerberos_auth.cc(321): pid=81563 :2014/10/06 11:46:33| negotiate_kerberos_auth: WARNING: received type 1 NTLM token
2014/10/06 11:46:33 kid1| ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: received type 1 NTLM token; }}

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru