Hi,

i recently configured a squid 3.3.8 on an ubuntu 14.04 trusty host using
NTLM/Kerberos auth. My configuration is mostly based on a config example
on squid-cache.org [1].

It took me a day to figure out why the following messages appeared in my
/var/log/squid3/cache.log:

> 2014/11/10 06:32:16| negotiate_kerberos_auth: ERROR: gss_accept_sec_context() 
> failed: Unspecified GSS failure.  Minor code may provide more information.
> 2014/11/10 06:32:16| ERROR: Negotiate Authentication validating user. Error 
> returned 'BH gss_accept_sec_context() failed: Unspecified GSS failure.  Minor 
> code may provide more information.'
> 2014/11/10 06:32:16| negotiate_wrapper: Return 'BH gss_accept_sec_context() 
> failed: Unspecified GSS failure.  Minor code may provide more information.'


After debugging and running each command seperately i discored that the
problem lies within the client proxy settings.

If i use the IP address instead of the hostname of the squid server, the
authentication works fine.

What could that possibly be? The error message is kind of "unhelpful".

[1]
http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory

Thanks for help in advance,
Schinken

---
Backspace e.V.
http://hackerspace-bamberg.de

mail: schin...@hackerspace-bamberg.de
xmpp: schin...@tai-wahn.de (otr)
GPG: FFB7 E40D B2DD D24C C9B7 B5C5 703C F8B8 882C 871E


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to