Hi
Maybe some general comments about LB, CNAMEs and Squid Kerberos will help. The
kerberos client will try to request a ticket based on the used hostname. e.g.
if you configure in your browser the proxy name as ha-proxy.slb.example.com
then the client will look for a serviceprincipal of
HT
Hi Klaus,
Is the group you added a security group ? Only security groups are part
of the Kerberos ticket. Which authorisation helper do you use or is this
just based on the auth helper output ?
What do you see on the client ? e.g. in powershell run whoami /groups
Did you clear th
