In more detail the required steps for squid_kerb_auth (from https://sourceforge.net/project/showfiles.php?group_id=196348 or from latest squid distribution) are: 1) Install kerberos client package 2) Install msktutil package from http://dag.wieers.com/rpm/packages/msktutil/ 3) Configure krb5.conf 4) Configure squid by adding auth_param negotiate program /usr/sbin/squid_kerb_auth auth_param negotiate children 10 auth_param negotiate keep_alive on 5) Create keytab for HTTP/fqdn with msktutil. a) kinit administrator@DOMAIN b) msktutil -c -b "CN=COMPUTERS" -s HTTP/<fqdn> -h <fqdn> -k /etc/squid/HTTP.keytab --computer-name squid-HTTP --upn HTTP/<fqdn> --server <domain controller> --verbose 6) Add the following to thw squid startup script KRB5_KTNAME=/etc/squid/HTTP.keytab export KRB5_KTNAME 7) Done Markus
