[squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

[Victor Sudakov]

Now as I run the test authenticator, what's the 
"INFO: continuation needed" 
message from the squid Kerberos helper? How do I interperet it? Is it
success or fail?

See output below:

$ bin/test_negotiate_auth.sh
/home/sudakov/squid.keytab:

Vno  Type                     Principal
  1  des-cbc-crc              HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  des-cbc-md5              HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  arcfour-hmac-md5         HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  aes256-cts-hmac-sha1-96  HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  aes128-cts-hmac-sha1-96  HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
Credentials cache: FILE:/home/sudakov/tmp/KKK
        Principal: sudakovva at SIBPTUS.TRANSNEFT.RU
    Cache version: 4

Server: krbtgt/SIBPTUS.TRANSNEFT.RU at SIBPTUS.TRANSNEFT.RU
Client: sudakovva at SIBPTUS.TRANSNEFT.RU
Ticket etype: arcfour-hmac-md5
Ticket length: 1120
Auth time:  Oct 14 12:09:10 2014
End time:   Oct 14 22:09:10 2014
Ticket flags: initial, pre-authenticated
Addresses: addressless

Server: HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
Client: sudakovva at SIBPTUS.TRANSNEFT.RU
Ticket etype: arcfour-hmac-md5
Ticket length: 1204
Auth time:  Oct 14 12:09:10 2014
Start time: Oct 14 12:09:13 2014
End time:   Oct 14 22:09:10 2014
Ticket flags: pre-authenticated
Addresses: addressless

negotiate_kerberos_auth.cc(212): pid=33822 :2014/10/14 12:09:17| negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
negotiate_kerberos_auth.cc(258): pid=33822 :2014/10/14 12:09:17| negotiate_kerberos_auth: DEBUG: Got 'YR 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' from squid (length: 2075).
negotiate_kerberos_auth.cc(311): pid=33822 :2014/10/14 12:09:17| negotiate_kerberos_auth: DEBUG: Decode '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' (decoded length: 1553).
negotiate_kerberos_auth.cc(373): pid=33822 :2014/10/14 12:09:17| negotiate_kerberos_auth: INFO: continuation needed
TT oRQwEqADCgEBoQsGCSqGSIb3EgECAg==
negotiate_kerberos_auth.cc(258): pid=33822 :2014/10/14 12:09:17| negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
BH quit command
$ 


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru