Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-21 Thread Fabio Bucci
apologize for my mail... Fabio 2016-01-14 6:09 GMT+01:00 LYMN : > On Wed, Jan 13, 2016 at 09:30:46AM +0100, Fabio Bucci wrote: >> Hi All, >> i want to terminate a previous job did by ex colleague is changed >> company. Now there is a cluster of 2 nodes of squid with NTLM >> transparent authentica

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-13 Thread LYMN
On Wed, Jan 13, 2016 at 09:30:46AM +0100, Fabio Bucci wrote: > Hi All, > i want to terminate a previous job did by ex colleague is changed > company. Now there is a cluster of 2 nodes of squid with NTLM > transparent authentication and one spare node i'm using as test and > configured with kerberos

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-13 Thread Fabio Bucci
Hi All, i want to terminate a previous job did by ex colleague is changed company. Now there is a cluster of 2 nodes of squid with NTLM transparent authentication and one spare node i'm using as test and configured with kerberos instead. Reading a lot of info i understood kerberos is more stable th

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-11 Thread LYMN
On Mon, Jan 11, 2016 at 09:06:27PM +1300, Amos Jeffries wrote: > On 11/01/2016 2:48 p.m., LYMN wrote: > > > > I did manage to get this working, you did mention the correct solution > > right down the end of your message. > > > > Correct for you yes. That can happen when making half-blind guesses

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-11 Thread Amos Jeffries
On 11/01/2016 2:48 p.m., LYMN wrote: > > I did manage to get this working, you did mention the correct solution > right down the end of your message. > Correct for you yes. That can happen when making half-blind guesses at what the problem actually is based on partial information. It might have b

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-10 Thread LYMN
Firstly, let me say that whatever you are using for a mail client makes reading/replying to your message difficult (see below for a small sample, I will clean up the rest as best I can)... I did manage to get this working, you did mention the correct solution right down the end of your message.

Re: [squid-users] kerberos authentication with a machine account doesn't work

2016-01-07 Thread L . P . H . van Belle
Hai,   First whats your OS/squid and samba version, handy to know. And post your smb.conf please.   Few things to check. /etc/krb5.keytab should have rights 600 (root:root) Run : klist -e -k /etc/krb5.keytab  post the output.   Your SPN for squid must be HTTP/fqdn And not http/fqdn