When I run msktutil I get this line in the output.
krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
I did kinit before issuing msktutil and it ran successfully. I can see
tickets when I issue klist.
On 30 April 2011 10:43, Go Wow gow...@gmail.com wrote:
Hi,
I'm
On 30/04/11 20:13, Go Wow wrote:
When I run msktutil I get this line in the output.
krb5_get_init_creds_keytab failed (Client not found in Kerberos database)
I did kinit before issuing msktutil and it ran successfully. I can see
tickets when I issue klist.
Tickets, klist and keytabs do not
Amos, Do you know where the problem is? Should I move back to squid
2.7, will that help?
If I configure my squid to use ntlm auth I get so many NTLM Type 3
token messages in cache.log. The same config works good on IE6. When I
test this with firefox 3.6+ or IE8 it keeps prompting the username.
Thanks Amos.
If I use negotiate_wrapper then I'm able to access websites using
squid (yes I dont get prompt for credentials) but I get many of these
messages in cache.log
2011/04/30 13:56:33| negotiate_wrapper: received type 3 NTLM token
2011/04/30 13:56:33| negotiate_wrapper: Got 'KK
On 30/04/11 21:58, Go Wow wrote:
Thanks Amos.
If I use negotiate_wrapper then I'm able to access websites using
squid (yes I dont get prompt for credentials) but I get many of these
messages in cache.log
2011/04/30 13:56:33| negotiate_wrapper: received type 3 NTLM token
2011/04/30 13:56:33|
Amos, Even now I get these entries in my cache.log
[2011/04/30 14:55:08, 1] libsmb/ntlmssp.c:335(ntlmssp_update)
got NTLMSSP command 3, expected 1
2011/04/30 14:55:08| negotiate_wrapper: Return 'NA = NT_STATUS_INVALID_PARAMETER
The whole point for me to move from ntlm to kerberos was to get
Hi Go,
Can you describe in detail what you did ( e.g. exact msktutil command).
BTW I updated yesterday the wiki pointing to a newer msktutil (version 0.4)
which you should try in the case you use an older version.
It looks to me that your client is not able to get the Kerberos ticket
from
I tried with msktutil version 0.4 but same thing is happening.
I followed your guide, firstly with samba/winbind, I created the
keytab and configure negotiate parameters in squid.conf but when I
open browser pointing to squid3 as proxy server (with fqdn not IP) it
prompts for username/password.
