Re: [squid-users] Negotiate Kerberos Auth - BH Invalid request

2017-06-13 Thread L . P . H . van Belle
First, it very handy to know your os and samba and squid versions used. ? Second, Squid/radius etc anything that uses NTLMv1 with samba stopped working after 4.5.0 I think your main problem can be explained by this extract from the release notes for 4.5.0: ? NTLMv1 authentication disabled by

Re: [squid-users] NEGOTIATE Kerberos Auth

2016-03-29 Thread akn ab
Many thanks Markus, i solved everythings!     Sent: Tuesday, March 22, 2016 at 1:25 AM From: "Markus Moeller" To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] NEGOTIATE Kerberos Auth Hi,   1) Yes, you should see user@DOMAIN for kerberos authentication,

Re: [squid-users] NEGOTIATE Kerberos Auth

2016-03-21 Thread Markus Moeller
belonging to EXTERNALS.COM are joined to EXTERNALS.COM Best Regards. Sent: Saturday, March 19, 2016 at 12:28 AM From: "Markus Moeller" To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] NEGOTIATE Kerberos Auth Hi, Is you client a member of FATHER.COM or KID1.

Re: [squid-users] NEGOTIATE Kerberos Auth

2016-03-21 Thread akn ab
i captured port 88 during handshake and i get:   eRR-C-PRINCIPAL-UNKNOWN   User's PC belonging to EXTERNALS.COM are joined to EXTERNALS.COM   Best Regards.   Sent: Saturday, March 19, 2016 at 12:28 AM From: "Markus Moeller" To: squid-users@lists.squid-cache.org Subject: Re: [squi

Re: [squid-users] NEGOTIATE Kerberos Auth

2016-03-18 Thread Markus Moeller
Hi, Is you client a member of FATHER.COM or KID1.FATHER.COM / KID2.FATHER.COM ? Can you get a wireshark capture on your client on port 88 ? You should see some TGS –REQs in the capture and I assume also TGS-REPs with error messages. Can you share these error messages ? Regards M