[squid-users] Authenticacion with Active Directory fails

[Amos Jeffries]

On 15/07/2016 4:07 a.m., Sergio Belkin wrote:
> Hi,
> 
> Using squid squid-3.5.19-1.el7.centos.x86_64,
> 
> I obtain a kerberos ticket but I get the following when trying to use the
> proxy:
> 
> 2016/07/14 12:57:03.711 kid1| 29,4| UserRequest.cc(290) authenticate: No
> Proxy-Auth header and no working alternative. Requesting auth header.
> 2016/07/14 12:57:03.712 kid1| 29,9| UserRequest.cc(487) addReplyAuthHeader:
> headertype:46 authuser:NULL
> 2016/07/14 12:57:03.712 kid1| 29,9| Config.cc(188) fixHeader: Sending
> type:46 header: 'Negotiate'
> 2016/07/14 12:57:04.159 kid1| 29,4| UserRequest.cc(290) authenticate: No
> Proxy-Auth header and no working alternative. Requesting auth header.
> 2016/07/14 12:57:04.159 kid1| 29,9| UserRequest.cc(487) addReplyAuthHeader:
> headertype:46 authuser:NULL
> 2016/07/14 12:57:04.159 kid1| 29,9| Config.cc(188) fixHeader: Sending
> type:46 header: 'Negotiate'
> 

That looks like a debug log of Negotiate/Kerberos authentication
beginning on two connections.

A good secure client does not send credentials until it needs to. Squdi
has received a request that it needs to authenticate, but does not yet
have credentiasl. So it responds with a 407 or 401 message requesting
the client send them using "Negotiate" auth protocol.
 No problem visible.


<snip>

> Please could you help me? Am I doing something wrong?

Perhapse if you described what your problem was ?

Amos