[squid-users] kerberos

Alex Gutiérrez Martínez alex at dvm.esines.cu
Fri Mar 29 14:30:24 UTC 2019


Hello Community, I just compiled my squid 4. Everything works fine 
except integration to the Kerberos authentication server.

I have already managed to integrate my ubuntu with the kerberos and the 
tickets are created correctly. Here i leave my configuration of the auth 
in the squid
###############################################################################################
auth_param negotiate program / usr / lib / squid / 
negotiate_kerberos_auth -d -s HTTP / proxy.empresa.cu
auth_param negotiate children 1000
auth_param negotiate keep_alive on

external_acl_type kerberos_group ttl = 3600 negative_ttl = 3600% LOGIN / 
usr / lib / squid / ext_kerberos_ldap_group_acl -a -g Internet_access -D 
EMPRESA.CU

###############################################################################################
in this case my domain is EMPRESA.CU

but i been unable to log in

this is the cache log

2019/03/28 09:46:47 kid1| helperOpenServers: Starting 0/1000 
'negotiate_kerberos_auth' processes
2019/03/28 09:46:47 kid1| helperStatefulOpenServers: No 
'negotiate_kerberos_auth' processes needed.
2019/03/28 09:46:47 kid1| helperOpenServers: Starting 0/5 
'ext_kerberos_ldap_group_acl' processes
2019/03/28 09:46:47 kid1| helperOpenServers: No 
'ext_kerberos_ldap_group_acl' processes needed.
2019/03/28 09:46:47 kid1| helperOpenServers: Starting 0/5 
'ext_kerberos_ldap_group_acl' processes
2019/03/28 09:46:47 kid1| helperOpenServers: No 
'ext_kerberos_ldap_group_acl' processes needed.

Any advice to make the login funtional?

-- 
Saludos Cordiales

Lic. Alex Gutiérrez Martínez

Tel. +53 7 2710327

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20190329/959243ca/attachment.html>


More information about the squid-users mailing list