[squid-users] SSO (ldap kerberos)
Craddock, Tommy
Tommy.Craddock at bicgraphic.com
Thu Sep 15 19:10:43 UTC 2016
Read the whole section you referred to:
/tmp/.msktkrb5.conf-L8DxV8
-- reload: Reloading Kerberos Context
-- finalize_exec: SAM Account Name is: squid-k$
-- try_machine_keytab_princ: Trying to authenticate for squid-k$ from local keytab...
-- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Preauthentication failed)
-- try_machine_keytab_princ: Authentication with keytab failed
-- try_machine_keytab_princ: Trying to authenticate for host/squid.example.lan from local keytab...
-- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
-- try_machine_keytab_princ: Authentication with keytab failed
-- try_machine_password: Trying to authenticate for squid-k$ with password.
-- create_default_machine_password: Default machine password for squid-k$ is squid-k
-- try_machine_password: Error: krb5_get_init_creds_keytab failed (Preauthentication failed)
-- try_machine_password: Authentication with password failed
-- try_user_creds: Checking if default ticket cache has tickets...
-- finalize_exec: Authenticated using method 4
It authed and was able to update the machine password:
-- ldap_get_pwdLastSet: pwdLastSet is 131182651460000000
-- set_password: Successfully set password, waiting for it to be reflected in LDAP.
-- ldap_get_pwdLastSet: pwdLastSet is 131182651580000000
-- set_password: Successfully reset computer's password
-- execute: Updating all entries for squid.example.lan in the keytab WRFILE:PROXY.keytab
Tommy E CRADDOCK JR
-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of erdosain9
Sent: Thursday, September 15, 2016 2:56 PM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] SSO (ldap kerberos)
This is no error???
try_machine_keytab_princ: Trying to authenticate for squid-k$ from local keytab...
-- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Preauthentication failed)
-- try_machine_keytab_princ: Authentication with keytab failed
-- try_machine_keytab_princ: Trying to authenticate for host/squid.example.lan from local keytab...
-- try_machine_keytab_princ: Error: krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
-- try_machine_keytab_princ: Authentication with keytab failed
.........................
Thanks
--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/SSO-ldap-kerberos-tp4679470p4679540.html
Sent from the Squid - Users mailing list archive at Nabble.com.
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
More information about the squid-users
mailing list