[squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
To: squid-users@squid-cache.org From: hua...@moeller.plus.com Date: Thu, 8 Apr 2010 20:08:10 +0100 Subject: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients Hi Nick, Did you use samba to create the keytab. I have seen that if you use samba

Re: [squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Nick Cairncross
-pass * -crypto DES-CBC-MD5 -pType KRB_NT_PRINCIPAL regards, Bilal To: squid-users@squid-cache.org From: hua...@moeller.plus.com Date: Thu, 8 Apr 2010 20:08:10 +0100 Subject: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients Hi

[squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
I haven't seen this error before. Is your AD 2008 ? Has the schema been changed ? These are the only attributes used by msktutil and are the default ones UserPrincipalName; DnsHostName; Description; ManagedBy; OperatingSystem; ObjectClass; CN; UserAccountControl; SamAccountName;

[squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
Henrik Nordström hen...@henriknordstrom.net wrote in message news:1270839045.2636.1.ca...@localhost.localdomain... fre 2010-04-09 klockan 12:12 +0100 skrev Markus Moeller: Regarding your second point about workgroups the answer is that Kerberos can work too (with popup). But to make it