[squid-users] Squid, Kerberos and FireFox (Was: Re: leaking memory in squid 3.4.8 and 3.4.7.)

[Markus Moeller]

Hi Victor,

  That just means that the server requires more information from the client. 
This could happen if mutual authentication is required or the dataset is too 
large and had to be split. If you run it in squid the client would send new 
data until the server says the exchange is complete ( I have not programmed 
this into the simple test tool).

Markus


"Victor Sudakov"  wrote in message 
news:20141014052401.GA8411 at admin.sibptus.tomsk.ru...

Now as I run the test authenticator, what's the
"INFO: continuation needed"
message from the squid Kerberos helper? How do I interperet it? Is it
success or fail?

See output below:

$ bin/test_negotiate_auth.sh
/home/sudakov/squid.keytab:

Vno  Type                     Principal
  1  des-cbc-crc 
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  des-cbc-md5 
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  arcfour-hmac-md5 
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  aes256-cts-hmac-sha1-96 
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
  1  aes128-cts-hmac-sha1-96 
HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
Credentials cache: FILE:/home/sudakov/tmp/KKK
        Principal: sudakovva at SIBPTUS.TRANSNEFT.RU
    Cache version: 4

Server: krbtgt/SIBPTUS.TRANSNEFT.RU at SIBPTUS.TRANSNEFT.RU
Client: sudakovva at SIBPTUS.TRANSNEFT.RU
Ticket etype: arcfour-hmac-md5
Ticket length: 1120
Auth time:  Oct 14 12:09:10 2014
End time:   Oct 14 22:09:10 2014
Ticket flags: initial, pre-authenticated
Addresses: addressless

Server: HTTP/proxy.sibptus.transneft.ru at SIBPTUS.TRANSNEFT.RU
Client: sudakovva at SIBPTUS.TRANSNEFT.RU
Ticket etype: arcfour-hmac-md5
Ticket length: 1204
Auth time:  Oct 14 12:09:10 2014
Start time: Oct 14 12:09:13 2014
End time:   Oct 14 22:09:10 2014
Ticket flags: pre-authenticated
Addresses: addressless

negotiate_kerberos_auth.cc(212): pid=33822 :2014/10/14 12:09:17| 
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
negotiate_kerberos_auth.cc(258): pid=33822 :2014/10/14 12:09:17| 
negotiate_kerberos_auth: DEBUG: Got 'YR 
YIIGDQYGKwYBBQUCoIIGATCCBf2gDTALBgkqhkiG9xIBAgKiggXqBIIF5mCCBeIGCSqGSIb3EgECAgEAboIF0TCCBc2gAwIBBaEDAgEOogcDBQAAAAAAo4IEtGGCBLAwggSsoAMCAQWhFhsUU0lCUFRVUy5UUkFOU05FRlQuUlWiLTAroAMCAQGhJDAiGwRIVFRQGxpwcm94eS5zaWJwdHVzLnRyYW5zbmVmdC5ydaOCBFwwggRYoAMCAReiggRPBIIES/tAzA94ZoZDS5uRFohOogD2BbSP4cemuY1qiwRBouKsLODgd/ALMHc9gtPPxqrVGEf4q+6gCF+jZYgBuFgnEG38eTIW3fWa80yPD5MM9W9EJshvgifhq1jnZ3eGdC90RdQxeB0KcM9ytGtz6gWPPuoy9PhZy8lmF86cKVxdIfWK6Jp08UM6DRZ22M6lHdopi6LcTgnHBnefFdPsnKThV7kQlw5kiOLM5skdwxt2BvS5vnfIf4P7APRGCQhhJOt/0dC9xSfglrOGlh718oQ7A0w1kpJ8tDcZPR/hrZhBcITu6VcK90cbEznlN/RBwC5KYEEOnjSeXOWy+ctxLu2BcIBUvcEcYrjFgfiiLZFngi/bqQmxsRsV9gFm2Ow2lKnHtvNaJ1XOxjVkM8nC546UU4Ywc6eM+Xu1kywiuyn1q1DrL6Q77DmbPh7G0qNc4SPAYTqMvEbEv2emq7sv7VsJUzkd2PcbryAxvzVNLfsLBegh6DDkdey/UaTEX66YlhrNLlIN+RN35Lww1qQv9wUVIV+DZ3kmwdgpJlClIjwH6+PWI19hS0ePs2Uipy0jJRl8G3P88bw29QV1y8rMOuLU2clI6UC/lmQepxDDw5Te+qTcgx96Ry4+J/FjhnPzo1yVUBG3UXlao0arSZmGEXldW9H5uZJXvxYLU8hYenBrPhpXB1neK+bxlOk6A/bfJ1pW3z/0Et6EP6w1Y7r4BfpE56Ecuf87VbDlwusUpY1yPD9/zYGrgSgnGMF8DdArr1Z67fpc3JmhJep6wL7REohPsFi8jhDhnheFSLYbWshAkqzcesNSy8ZAfc+TIUIHBwFT6hbMBqguo1UzDvRk6cLsKa/WHkwa52tOhUpacfHmBjHT8xb0Zj81RbQbtV+PIfB0+EnLdT1T34zcLLl3PKAsr9d6Dp72QclxdAfVCKwhFMJht0k2MEZtgCJZwZ6Wa3gh9FDGa/mEcawB0he0+yLd/NIaoO3uLQ6dKLa2dPc7z3qeXg/fhwG5YR7NFoY+0b8UI4ANH1yCOZVDBrmC3q1tCVx5bGd/qOFLA6zAipRHpH+znqWPLqkyA9t27SgikivFEGEv2JNHZkU1Xa56zf2IPo4b3Fo2JO6FVe/qYz4u1hoKOi3DmwRPojdh6dHBvSEDguM3Nk00poYj5az1cLkQGHpYPmdinVXtZd0fS97Il/GAovcSnjV7T+1NZBlBkohci0R3XvxFwCGyXQ7JwlXcLIXhvf7FrS9FW4tY1n4cR0PM1MMWhJp0R5jKJEKR2bN3uEOq0dvLraRFaFnoV/iNhLG4p6SjBs8guzkZRhugUJnPX75xTZpb0+pTdGRpOQ+BDE9rFAoQ9fMZ2js1Q63SHb9rbP7AF+qt3jE+g5pJUW1IofOkl97rUZjBu0LfCNb05Giql6mj6V8XjiAPIwgmlYQlCsa7YzzWjhzg5cg5rAgX3D6paeh3uJmRs3ikgf8wgfygAwIBF6KB9ASB8Vp/bmgivaLEVnnZ/9n6gwfFLjHYHBIP06HjeyA1Jyb3pzUTRFvkpoZ+TVpwbLLIt1l0Nr33Q9HA286P15VmwUP8gAasQWE6l5mLFNIl4I9jnk6ewqblnec1MYCtg36Qy7ybgoOFDIcOESHyS3OsET379m6cwXpC4EOQzG8yTxW9hNuuIkz7NkmyAeQup3uPvw0YoLWj61f4yaNlKOWJnr1MpnMu6ZrJNM3mv9/ATXQAlNaJdrv8Vr7JUCNcD+SwyLb901woRjb4XBrWpJBpZAWiIfzMjKYJhGTjwvESiTnnwARYdLDhEEZyr1dQJjkU87c=' 
from squid (length: 2075).
negotiate_kerberos_auth.cc(311): pid=33822 :2014/10/14 12:09:17| 
negotiate_kerberos_auth: DEBUG: Decode 
'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' 
(decoded length: 1553).
negotiate_kerberos_auth.cc(373): pid=33822 :2014/10/14 12:09:17| 
negotiate_kerberos_auth: INFO: continuation needed
TT oRQwEqADCgEBoQsGCSqGSIb3EgECAg==
negotiate_kerberos_auth.cc(258): pid=33822 :2014/10/14 12:09:17| 
negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
BH quit command
$


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users