[squid-users] Kerberos Authentication Failing for Windows 7+ with BH gss_accept_sec_context() failed

[Pedro Lobo]

Thanks Jon,

If it had never worked on Windows 7, then I could possibly see that as being an issue, but the fact that it's worked and then a couple if days later stopped, leads me to believe that is not the issue here.

Thanks anyway for your input.

Cheers,
Pedro

On 28 Oct 2014, at 1:17, John Mok wrote:

> Pedro,
>
> By default, Windows 7 (and later) does not support weak encryption
> types in Kerberos, e.g. DES. Since Windows 7 clients are working with
> domain controller on Windows 2000 functional level, it is very likely
> the Kerberos encryption type on the TGT ticket is DES. You can verify
> that on Windows XP/2003.
>
> If so, you need to re-enable the support of weak encryption types in
> Kerberos on Windows 7 by GPO or editing registry.
>
> http://blogs.msdn.com/b/openspecification/archive/2011/05/31/windows-configurations-for-kerberos-supported-encryption-type.aspx
>
> http://technet.microsoft.com/en-us/library/dd560670%28v=ws.10%29.aspx
>
> Regards,  John Mok
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 536 bytes
Desc: OpenPGP digital signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20141030/d00445c2/attachment.sig>