[squid-users] Kerberos (Negotiate) problem with win2008 AD users

[Markus Moeller]

You are welcome

Markus

"Victor Sudakov"  wrote in message 
news:20160305180102.GA94804 at admin.sibptus.tomsk.ru...

Markus Moeller wrote:
>
> If I look at the wireshark capture details I see that the client  is 
> sending
> a key of version 3( kvno) , but the keytab is version 1. This will create 
> a
> mismatch.  What do you get when using the 2003 clients ?

Markus, you are great! That was indeed the cause of the problem. Thank
you ever so much.

I have created an identical key with kvno=3 in the squid keytab, and
now it's working. To hell with the Windows admin and his bogus kvno.

I wish the diagnostic message was more informative, but this is not
Squid's problem, but that of the Kerberos library.


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users