On 06.10.2009 16:27, anandhi jay wrote: > Hi, > > I have installed the kerberos5 in linux and configured squid for that. > From IE6 i configured the squid proxy ipaddress and port. It asked for > the username and password. > I have given the kerberos principal as username and password for that. > But I am getting 407 authentication required response only. Herewith i > have given the packets also , I think it is trying for NTLM, but i want > kerberos. I have enabled the > Enable Internet windows Authentication in the Internet options. Kindly > help me to work on the kerberos authentication using squid. > > > > GET http://www.whatismyip.com/ HTTP/1.0 > Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, > application/x-shockwave-flash, application/vnd.ms-excel, > application/vnd.ms-powerpoint, application/msword, > application/x-ms-application, application/x-ms-xbap, > application/vnd.ms-xpsdocument, application/xaml+xml, > application/x-silverlight, */* > Accept-Language: en-us > User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; > .NET CLR 2.0.50727; FDM; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; > InfoPath.1) > Proxy-Connection: Keep-Alive > Cookie: __utma=18138879.169229710.1251445998.1251445998.1251445998.1; > __utmz=18138879.1251445999.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none) > Proxy-Authorization: Negotiate > TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== > Host: www.whatismyip.com > > > HTTP/1.0 407 Proxy Authentication Required > Server: squid/2.6.STABLE22 > Date: Tue, 06 Oct 2009 11:24:09 GMT > Content-Type: text/html > Content-Length: 1311 > Expires: Tue, 06 Oct 2009 11:24:09 GMT > X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 > Proxy-Authenticate: Negotiate > Proxy-Authenticate: Negotiate received > X-Cache: MISS from EXAMPLE.COM > Via: 1.0 EXAMPLE.COM:3129 (squid/2.6.STABLE22) > Proxy-Connection: close > > GET http://www.whatismyip.com/ HTTP/1.0 > Accept: image/gif, image/jpeg, image/pjpeg, image/pjpeg, > application/x-shockwave-flash, application/vnd.ms-excel, > application/vnd.ms-powerpoint, application/msword, > application/x-ms-application, application/x-ms-xbap, > application/vnd.ms-xpsdocument, application/xaml+xml, > application/x-silverlight, */* > Accept-Language: en-us > User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; > .NET CLR 2.0.50727; FDM; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; > InfoPath.1) > Proxy-Connection: Keep-Alive > Cookie: __utma=18138879.169229710.1251445998.1251445998.1251445998.1; > __utmz=18138879.1251445999.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none) > Host: www.whatismyip.com > Proxy-Authorization: Negotiate > TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== > NTLMSSP > > HTTP/1.0 407 Proxy Authentication Required > Server: squid/2.6.STABLE22 > Date: Tue, 06 Oct 2009 11:24:10 GMT > Content-Type: text/html > Content-Length: 1311 > Expires: Tue, 06 Oct 2009 11:24:10 GMT > X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 > Proxy-Authenticate: Negotiate > Proxy-Authenticate: Negotiate received > X-Cache: MISS from EXAMPLE.COM > Via: 1.0 EXAMPLE.COM:3129 (squid/2.6.STABLE22) > Proxy-Connection: close > > > > > Regards, > anu. > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos >
I could successfully configure only IE8, IE6 never works with Kerberos proxy, also IE7 had same problems both using NTLM only or basic. ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
