[squid-users] Problem with Kerberos ticket keytab

erdosain9 erdosain9 at gmail.com
Mon Feb 5 14:54:26 UTC 2018


Hi to all.

The squid was working fine, but i made a mistake and... delete the
proxy.keytab. I try to do it again, but make a mistake in the syntax

wrong syntax (the real name is not squidproxy.domain.lan is
squid.domain.lan):

msktutil -c -b "CN=COMPUTERS" -s HTTP/squidproxy.domain.lan -k
/etc/squid/PROXY.keytab --computer-name SQUIDPROXY-K --upn
HTTP/squidproxy.domain.lan --server adw-1.domain.lan --verbose --enctypes 28

now i put well the syntax, but the keytab is wrong... why??

well syntax:

msktutil -c -b "CN=COMPUTERS" -s HTTP/squid.domain.lan -h squid.domain.lan
-k /etc/squid/PROXY.keytab --computer-name SQUIDPROXY-K --upn
HTTP/squid.domain.lan --server adw-1.domain.lan --verbose --enctypes 28


[root at squid squid]# ktutil 
ktutil:  read_kt PROXY.keytab 
ktutil:  l
slot KVNO Principal
---- ----
---------------------------------------------------------------------
   1   18                 squidproxy-k$@DOMAIN.LAN
   2   18                 squidproxy-k$@DOMAIN.LAN
   3   18                 squidproxy-k$@DOMAIN.LAN
   4   18    HTTP/squidproxy.DOMAIN.lan at DOMAIN.LAN
   5   18    HTTP/squidproxy.DOMAIN.lan at DOMAIN.LAN
   6   18    HTTP/squidproxy.DOMAIN.lan at DOMAIN.LAN
   7   18         host/squid.DOMAIN.lan at DOMAIN.LAN
   8   18         host/squid.DOMAIN.lan at DOMAIN.LAN
   9   18         host/squid.DOMAIN.lan at DOMAIN.LAN
  10   18         HTTP/squid.DOMAIN.lan at DOMAIN.LAN
  11   18         HTTP/squid.DOMAIN.lan at DOMAIN.LAN
  12   18         HTTP/squid.DOMAIN.lan at DOMAIN.LAN


Why squidproxy.DOMAIN.LAN????????? what can i do to solve this???

Thanks to all!!



--
Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html


More information about the squid-users mailing list