[squid-users] SQUID 4.6 - Kerberos Helper Error - FreeBSD

[Amos Jeffries]

On 21/04/19 9:02 am, Fabricio Ferreira wrote:
> Hello Everyone,
> Greetings.
> Recently I had to upgrade my Squid to ver 4.6 - that´s when my problems
> started.
> I can't use the KERBEROS helper anymore.
> I am trying to use exactly the same configurtion I was using for Squid
> 3.5.27(by the way, I am using Squid with SAMBA 4.10 – 
> From the command prompt, everything works fine. Keytab was successfully
> generated and it´s working.

Was that run as the same low-privilege user account Squid runs it?

One thing you can do is use the exact same options (including -d) that
Squid uses and see of there is any noticable difference in the stderr
log output it produces vs the cache.log entries you provided below.

If nothing shows up there, try copy-paste'ing the same "YR ..." line
(single line of input) that Squid sends ans see if anything shows up then.


The helpers each start by opening /etc/krb5.keytab then immediately
switch to separate memory-only keytabs. That may be something going
wrong with the /etc/krb5.keytab file access.


Amos