[squid-users] Problem with Kerberos and ext_kerberos_ldap_group_acl not being able to reach realm's KDC

Silamael Darkomen silamael at coronamundi.de
Mon Sep 19 11:39:42 UTC 2016



On 16.09.2016 22:11, Markus Moeller wrote:
> Hi Silamael,
> 
>     Can you perform a kinit user at EXAMPLE.COM ?   Does the squid user
> have read access to  krb5.conf ?
> 
> Markus

Hello Markus,

Yes, the permissions are correctly set up so that Squid and it's
processes can read every file needed.
For it seems that the Heimdal library ignores the dns_lookup_kdc and
dns_lookup_realm options in the krb5.conf...
As written in my other response, the helper also crashes at the end.
I'll take a look on the stack trace...

-- Matthias


More information about the squid-users mailing list