Hi Daniel,

If this happens for all client, then your environment is not correctly setup. It basically means the client can not get a Kerberos ticket from the kdc and falls back to NTLM instead.

Markus


"Daniel Faulknor" <[email protected]> wrote in message news:caao-zhb9kmwk-jbbhsxgw+o7rs208q6_yycw1znffndt82f...@mail.gmail.com...
Hi,

I've followed the
http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory
howto, and I am now getting this error in my cache.log

2011/07/15 12:13:45| squid_kerb_auth: WARNING: received type 1 NTLM token
2011/07/15 12:13:45| authenticateNegotiateHandleReply: Error
validating user via Negotiate. Error returned 'BH received type 1 NTLM
token'
2011/07/15 12:13:54| squid_kerb_auth: DEBUG: Got 'YR
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==' from squid
(length: 59).
2011/07/15 12:13:54| squid_kerb_auth: DEBUG: Decode
'TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==' (decoded
length: 40).
2011/07/15 12:13:54| squid_kerb_auth: WARNING: received type 1 NTLM token
2011/07/15 12:13:54| authenticateNegotiateHandleReply: Error
validating user via Negotiate. Error returned 'BH received type 1 NTLM
token'

This happens both when trying to access via the proxy using IE/Chrome/Firefox

None of my googling as presented a solution

Thanks



Reply via email to