Re: [squid-users] squid kerberos auth, acl note group

2020-11-06 Thread Eliezer Croitor
t; Behalf Of Klaus Brandl > Sent: Monday, July 27, 2020 7:36 PM > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] squid kerberos auth, acl note group > > Hi Markus and Amos, > > thanks for your answers, it is working now, after the group was > deleted and &

Re: [squid-users] squid kerberos auth, acl note group

2020-11-05 Thread Klaus Brandl
Klaus Brandl > Sent: Monday, July 27, 2020 7:36 PM > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] squid kerberos auth, acl note group > > Hi Markus and Amos, > > thanks for your answers, it is working now, after the group was > deleted and > created n

Re: [squid-users] squid kerberos auth, acl note group

2020-11-04 Thread Eliezer Croitor
Mobile: +972-5-28704261 Email: ngtech1...@gmail.com -Original Message- From: squid-users On Behalf Of Klaus Brandl Sent: Monday, July 27, 2020 7:36 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] squid kerberos auth, acl note group Hi Markus and Amos, thanks for your

Re: [squid-users] squid kerberos auth, acl note group

2020-10-19 Thread Klaus Brandl
> > But i think, we have a caching problem here, i found out, that the > > group > > informations are only updated on a squid reconfigure. > > > > And also the acl note group ... seems to be cached as long as squid > > is > > restarted completely. I removed the configured group from the user, >

Re: [squid-users] squid kerberos auth, acl note group

2020-07-27 Thread Klaus Brandl
Hi Markus and Amos, thanks for your answers, it is working now, after the group was deleted and created new. Most likely it was no security object... Regards On Saturday 25 July 2020 16:43:13 Markus Moeller wrote: > Hi Klaus, > > Is the group you added a security group ? Only security

Re: [squid-users] squid kerberos auth, acl note group

2020-07-25 Thread Markus Moeller
Hi Klaus, Is the group you added a security group ? Only security groups are part of the Kerberos ticket. Which authorisation helper do you use or is this just based on the auth helper output ? What do you see on the client ? e.g. in powershell run whoami /groups Did you clear

Re: [squid-users] squid kerberos auth, acl note group

2020-07-25 Thread Amos Jeffries
On 25/07/20 2:48 am, Klaus Brandl wrote: > sorry, i did not found this script, and the binary is not available on our > product, because i'm no developer... > Darn. Okay that hinders testing a bit. > But i think, we have a caching problem here, i found out, that the group > informations are

Re: [squid-users] squid kerberos auth, acl note group

2020-07-24 Thread Klaus Brandl
sorry, i did not found this script, and the binary is not available on our product, because i'm no developer... But i think, we have a caching problem here, i found out, that the group informations are only updated on a squid reconfigure. And also the acl note group ... seems to be cached as

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Amos Jeffries
On 23/07/20 12:53 am, Klaus Brandl wrote: > On Thursday 23 July 2020 00:16:45 Amos Jeffries wrote: >> On 22/07/20 8:59 pm, Klaus Brandl wrote: >>> but i have compared the encoded string from the auth helper with the >>> string at the Proxy-Authentication header from the client with tcpdump, >>>

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Klaus Brandl
On Thursday 23 July 2020 00:16:45 Amos Jeffries wrote: > On 22/07/20 8:59 pm, Klaus Brandl wrote: > > but i have compared the encoded string from the auth helper with the > > string at the Proxy-Authentication header from the client with tcpdump, > > and it's exactly the same: > > > >

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Amos Jeffries
On 22/07/20 8:59 pm, Klaus Brandl wrote: > > but i have compared the encoded string from the auth helper with the string > at > the Proxy-Authentication header from the client with tcpdump, and it's > exactly > the same: > > Proxy-Authorization: Negotiate

Re: [squid-users] squid kerberos auth, acl note group

2020-07-22 Thread Klaus Brandl
On Tuesday 21 July 2020 14:21:46 Alex Rousskov wrote: > On 7/21/20 10:41 AM, Klaus Brandl wrote: > > we have a problem with the squid kerberos auth helper and the note acl > > matching to user groups in an active directory. > > First the user was in one group, which was configured via the groupSid

Re: [squid-users] squid kerberos auth, acl note group

2020-07-21 Thread Alex Rousskov
On 7/21/20 10:41 AM, Klaus Brandl wrote: > we have a problem with the squid kerberos auth helper and the note acl > matching to user groups in an active directory. > First the user was in one group, which was configured via the groupSid base64 > string as a note acl, and this was working very

[squid-users] squid kerberos auth, acl note group

2020-07-21 Thread Klaus Brandl
Hi there, we have a problem with the squid kerberos auth helper and the note acl matching to user groups in an active directory. First the user was in one group, which was configured via the groupSid base64 string as a note acl, and this was working very well. Then there was added a new group