Re: Re: Squid + Kerberos + Active Directory

["Markus Moeller" <huaraz@xxxxxxxxxxxxxxxx>]

"Truth Seeker" <truth_seeker_3535@xxxxxxxxx> wrote in message 
news:666179.84807.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Dear Markus,
>
> please look in to the following informations;
>
>
> [root@linuxproxy ~]# kinit -k -t HTTP.keytab HTTP/linuxproxy.panasonic.com
> kinit(v5): No such file or directory while getting initial credentials

This should have worked. Can you check with strace which file kinit is 
complaining about.

> [root@linuxproxy ~]# kinit -k -t HTTP.keytab HTTP/linuxproxy
> kinit(v5): Client not found in Kerberos database while getting initial 
> credentials

That is OK since above should have worked.

> [root@linuxproxy ~]#
>
>
> included '-d' as the following;
>
> auth_param negotiate program  /usr/lib/squid/squid_kerb_auth -d
> auth_param negotiate children 10
> auth_param negotiate keep_alive on
>
> then far down... in debug section, debugging was also turned on.. as 
> (without this, just with -d, it is not giving any output in the 
> cachel.log)

To me it looks squid_kerb_auth didn't start at all. Can you do a ps -ef to 
see if there are squid_kerb_auth processes running ?

> debug_options ALL,1 33,2 28,9

This is not required for squid_kerb_auth debug.  Do you use a cache_log 
config option in your squid.conf to  something different then cache.log ?

As a minimum you should see

2009/06/04 19:49:27| helperStatefulOpenServers: Starting 10 
'squid_kerb_auth' processes

and with -d and 10 processes

2009/06/04 19:51:47| helperStatefulOpenServers: Starting 10 
'squid_kerb_auth' processes
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6
2009/06/04 19:51:47| squid_kerb_auth: Starting version 1.0.6


> NOTE: I tried three combinations to get the output in cache.log
>
> 1. following was enabled ;
> squid_kerb_auth -d
> debug_options ALL,1 33,2 28,9
>
> 2. only debug_options are enabled (no -d to squid_kerb_auth)
>
> 3. only squid_kerb_auth -d was enabled (debug_option was disabled)
>
>
> Please have a look at the outputs...
>
> 1. following was enabled ;
> squid_kerb_auth -d
> debug_options ALL,1 33,2 28,9
>
> and the output of cache.log;
>
> 2009/06/04 08:30:54.985| aclCheckFast: list: 0x8624f40
> 2009/06/04 08:30:54.985| ACLChecklist::preCheck: 0xbfafbde4 checking 
> 'ident_lookup_access deny all'
> 2009/06/04 08:30:54.985| ACLList::matches: checking all
> 2009/06/04 08:30:54.985| ACL::checklistMatches: checking 'all'
> 2009/06/04 08:30:54.985| aclMatchIp: '192.168.4.222' found
> 2009/06/04 08:30:54.985| ACL::ChecklistMatches: result for 'all' is 1
> 2009/06/04 08:30:54.985| ACLList::matches: result is true
> 2009/06/04 08:30:54.985| aclmatchAclList: 0xbfafbde4 returning true (AND 
> list satisfied)
> 2009/06/04 08:30:54.985| ACLChecklist::markFinished: 0xbfafbde4 checklist 
> processing finished
> 2009/06/04 08:30:54.985| ACLChecklist::~ACLChecklist: destroyed 0xbfafbde4
> 2009/06/04 08:30:54.985| ACLChecklist::preCheck: 0x8931178 checking 
> 'http_access allow manager localhost'
> 2009/06/04 08:30:54.985| ACLList::matches: checking manager
> 2009/06/04 08:30:54.985| ACL::checklistMatches: checking 'manager'
> 2009/06/04 08:30:54.985| ACL::ChecklistMatches: result for 'manager' is 0
> 2009/06/04 08:30:54.985| ACLList::matches: result is false
> 2009/06/04 08:30:54.985| aclmatchAclList: 0x8931178 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:30:54.985| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:30:54.985| ACLChecklist::preCheck: 0x8931178 checking 
> 'http_access deny manager'
> 2009/06/04 08:30:54.985| ACLList::matches: checking manager
> 2009/06/04 08:30:54.985| ACL::checklistMatches: checking 'manager'
> 2009/06/04 08:30:54.985| ACL::ChecklistMatches: result for 'manager' is 0
> 2009/06/04 08:30:54.985| ACLList::matches: result is false
> 2009/06/04 08:30:54.985| aclmatchAclList: 0x8931178 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:30:54.985| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:30:54.985| ACLChecklist::preCheck: 0x8931178 checking 
> 'http_access deny !Safe_ports'
> 2009/06/04 08:30:54.985| ACLList::matches: checking !Safe_ports
> 2009/06/04 08:30:54.985| ACL::checklistMatches: checking 'Safe_ports'
> 2009/06/04 08:30:54.985| ACL::ChecklistMatches: result for 'Safe_ports' is 
> 1
> 2009/06/04 08:30:54.986| ACLList::matches: result is false
> 2009/06/04 08:30:54.986| aclmatchAclList: 0x8931178 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:30:54.986| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:30:54.986| ACLChecklist::preCheck: 0x8931178 checking 
> 'http_access deny CONNECT !SSL_ports'
> 2009/06/04 08:30:54.986| ACLList::matches: checking CONNECT
> 2009/06/04 08:30:54.986| ACL::checklistMatches: checking 'CONNECT'
> 2009/06/04 08:30:54.986| ACL::ChecklistMatches: result for 'CONNECT' is 0
> 2009/06/04 08:30:54.986| ACLList::matches: result is false
> 2009/06/04 08:30:54.986| aclmatchAclList: 0x8931178 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:30:54.986| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:30:54.986| ACLChecklist::preCheck: 0x8931178 checking 
> 'http_access deny !auth'
> 2009/06/04 08:30:54.986| ACLList::matches: checking !auth
> 2009/06/04 08:30:54.986| ACL::checklistMatches: checking 'auth'
> 2009/06/04 08:30:54.986| aclMatchAcl: returning 0 sending authentication 
> challenge.
> 2009/06/04 08:30:54.986| ACL::ChecklistMatches: result for 'auth' is 0
> 2009/06/04 08:30:54.986| ACLList::matches: result is true
> 2009/06/04 08:30:54.986| aclmatchAclList: 0x8931178 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:30:54.986| ACLChecklist::checkForAsync: requiring Proxy Auth 
> header.
> 2009/06/04 08:30:54.986| ACLChecklist::markFinished: 0x8931178 checklist 
> processing finished
> 2009/06/04 08:30:54.986| aclmatchAclList: async=1 nodeMatched=1 
> async_in_progress=0 lastACLResult() = 1 finished() = 1
> 2009/06/04 08:30:54.986| ACLChecklist::check: 0x8931178 match found, 
> calling back with 2
> 2009/06/04 08:30:54.986| ACLChecklist::checkCallback: 0x8931178 answer=2
> 2009/06/04 08:30:54.986| aclGetDenyInfoPage: got called for auth
> 2009/06/04 08:30:54.986| aclGetDenyInfoPage: no match
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.986| aclCheckFast: list: 0
> 2009/06/04 08:30:54.986| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.986| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.987| aclCheckFast: list: 0
> 2009/06/04 08:30:54.987| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.987| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.987| aclCheckFast: list: 0
> 2009/06/04 08:30:54.987| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.987| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.987| aclCheckFast: list: 0
> 2009/06/04 08:30:54.987| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.987| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.987| aclCheckFast: list: 0
> 2009/06/04 08:30:54.987| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:30:54.987| ACLChecklist::~ACLChecklist: destroyed 0x893120c
> 2009/06/04 08:30:54.987| ACLChecklist::~ACLChecklist: destroyed 0x8931178
> 2009/06/04 08:30:54.987| ACLChecklist::~ACLChecklist: destroyed 0x8931178
>
>
>
>
> 2. only debug_options are enabled (no -d to squid_kerb_auth)
>
> 2009/06/04 08:35:34.444| aclCheckFast: list: 0x9de4f40
> 2009/06/04 08:35:34.444| ACLChecklist::preCheck: 0xbf9b9ca4 checking 
> 'ident_lookup_access deny all'
> 2009/06/04 08:35:34.444| ACLList::matches: checking all
> 2009/06/04 08:35:34.444| ACL::checklistMatches: checking 'all'
> 2009/06/04 08:35:34.444| aclMatchIp: '192.168.4.222' found
> 2009/06/04 08:35:34.444| ACL::ChecklistMatches: result for 'all' is 1
> 2009/06/04 08:35:34.444| ACLList::matches: result is true
> 2009/06/04 08:35:34.444| aclmatchAclList: 0xbf9b9ca4 returning true (AND 
> list satisfied)
> 2009/06/04 08:35:34.444| ACLChecklist::markFinished: 0xbf9b9ca4 checklist 
> processing finished
> 2009/06/04 08:35:34.444| ACLChecklist::~ACLChecklist: destroyed 0xbf9b9ca4
> 2009/06/04 08:35:34.444| ACLChecklist::preCheck: 0xa0ed148 checking 
> 'http_access allow manager localhost'
> 2009/06/04 08:35:34.444| ACLList::matches: checking manager
> 2009/06/04 08:35:34.444| ACL::checklistMatches: checking 'manager'
> 2009/06/04 08:35:34.444| ACL::ChecklistMatches: result for 'manager' is 0
> 2009/06/04 08:35:34.444| ACLList::matches: result is false
> 2009/06/04 08:35:34.444| aclmatchAclList: 0xa0ed148 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:35:34.444| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:35:34.444| ACLChecklist::preCheck: 0xa0ed148 checking 
> 'http_access deny manager'
> 2009/06/04 08:35:34.444| ACLList::matches: checking manager
> 2009/06/04 08:35:34.444| ACL::checklistMatches: checking 'manager'
> 2009/06/04 08:35:34.444| ACL::ChecklistMatches: result for 'manager' is 0
> 2009/06/04 08:35:34.444| ACLList::matches: result is false
> 2009/06/04 08:35:34.444| aclmatchAclList: 0xa0ed148 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:35:34.444| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:35:34.444| ACLChecklist::preCheck: 0xa0ed148 checking 
> 'http_access deny !Safe_ports'
> 2009/06/04 08:35:34.444| ACLList::matches: checking !Safe_ports
> 2009/06/04 08:35:34.444| ACL::checklistMatches: checking 'Safe_ports'
> 2009/06/04 08:35:34.444| ACL::ChecklistMatches: result for 'Safe_ports' is 
> 1
> 2009/06/04 08:35:34.444| ACLList::matches: result is false
> 2009/06/04 08:35:34.444| aclmatchAclList: 0xa0ed148 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:35:34.444| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:35:34.444| ACLChecklist::preCheck: 0xa0ed148 checking 
> 'http_access deny CONNECT !SSL_ports'
> 2009/06/04 08:35:34.444| ACLList::matches: checking CONNECT
> 2009/06/04 08:35:34.444| ACL::checklistMatches: checking 'CONNECT'
> 2009/06/04 08:35:34.444| ACL::ChecklistMatches: result for 'CONNECT' is 0
> 2009/06/04 08:35:34.444| ACLList::matches: result is false
> 2009/06/04 08:35:34.444| aclmatchAclList: 0xa0ed148 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:35:34.444| aclmatchAclList: async=0 nodeMatched=0 
> async_in_progress=0 lastACLResult() = 0 finished() = 0
> 2009/06/04 08:35:34.445| ACLChecklist::preCheck: 0xa0ed148 checking 
> 'http_access deny !auth'
> 2009/06/04 08:35:34.445| ACLList::matches: checking !auth
> 2009/06/04 08:35:34.445| ACL::checklistMatches: checking 'auth'
> 2009/06/04 08:35:34.445| aclMatchAcl: returning 0 sending authentication 
> challenge.
> 2009/06/04 08:35:34.445| ACL::ChecklistMatches: result for 'auth' is 0
> 2009/06/04 08:35:34.445| ACLList::matches: result is true
> 2009/06/04 08:35:34.445| aclmatchAclList: 0xa0ed148 returning false (AND 
> list entry failed to match)
> 2009/06/04 08:35:34.445| ACLChecklist::checkForAsync: requiring Proxy Auth 
> header.
> 2009/06/04 08:35:34.445| ACLChecklist::markFinished: 0xa0ed148 checklist 
> processing finished
> 2009/06/04 08:35:34.445| aclmatchAclList: async=1 nodeMatched=1 
> async_in_progress=0 lastACLResult() = 1 finished() = 1
> 2009/06/04 08:35:34.445| ACLChecklist::check: 0xa0ed148 match found, 
> calling back with 2
> 2009/06/04 08:35:34.445| ACLChecklist::checkCallback: 0xa0ed148 answer=2
> 2009/06/04 08:35:34.445| aclGetDenyInfoPage: got called for auth
> 2009/06/04 08:35:34.445| aclGetDenyInfoPage: no match
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.445| aclCheckFast: list: 0
> 2009/06/04 08:35:34.445| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.445| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.446| aclCheckFast: list: 0
> 2009/06/04 08:35:34.446| aclCheckFast: no matches, returning: 1
> 2009/06/04 08:35:34.446| ACLChecklist::~ACLChecklist: destroyed 0xa0ed1dc
> 2009/06/04 08:35:34.446| ACLChecklist::~ACLChecklist: destroyed 0xa0ed148
> 2009/06/04 08:35:34.446| ACLChecklist::~ACLChecklist: destroyed 0xa0ed148
>
>
>
> 3. only squid_kerb_auth -d was enabled (debug_option was disabled)
>
> there was not any output in the cache.log

This are messages I would expect in a non working setup


2009/06/04 20:05:20| squid_kerb_auth: Got 'YR 
YIIFOwYGKwYBBQUCoIIFLzKKwYBBAGCNwICCqKCBQEEggT9YIIE+QYQBuggToMIIE5KADAgEFoQMCAQ6iBwMFACAAAACjggQGYYIEAjCCA/6gAwIBBaEQGw5XSU4yMDAzUjIuSE9NRaInMCWgAwIBAqEeMBwbBEhUVFAbFG9wZW5zdXNlMTEuc3VzZS5ob21lo4IDujCCA7agAwIBF6EDAgECooIDqASCA6RZPrqPB92Snu75XOUv49L/C+gSY80HNNF2hWOTmasisJv60HGOyJa2y+gFEHJzOUAziJConuwfKS8HT0L43pysD5nwC5q13SM2bXHTA2p3dRhSEO7RlCHILEIPTXWQd20VFJmWo1Z0ONTgqisJIWd44u8F6FWrzi4x4oAAOjfCYFa/ekXdwHpaY3x5gya5UGAU9a2m+T5v2C3klW1EdXStbe8JBKZFuXMqVW8TW6Slikdc9CEvCvvET0k0TKjv1+iBvifLfoCHELdwEnTrfbskuPeDor9Ji00OTgQFyTYNZFyG0OJJp8R5PcwcN+WC8eOSDBPf9Xqr5slKC6QNWO7/KTmKwUpha5hrP8mQCJ9kHgHAprtIXBTo3Qa49tUsfosVnUoyKNQu1boiq227pq8F55us0y9BAKKaecWhRlPRhVHYpvSYYv/cFxTcvh65zLXU3XpaKppmQyaGVoIwhASz+jlL9oQbcAXPyrB4bG3ANQRACAADKmApTNkB22Oq5ns6j0Go3rTzdjlbDnBJ5n+hwI4T8TmHCHJ21x234bwVSu/Sz90kEau1tCXETJXpHUha18Oe6JHNFQdcGSYp+L3On+XTDCGALAp3hGWuWL4ck12euE2ybNjojwL3BxhHn3Yb29vYnrHbDDM4+J1WDXqTkGtFvsW+iF8To8oj1Bh4hBZO14pfkQy85C2v7C3pBGYfw3CCuGvynRObfSRFQeFfFBUZ9diBDszwMJkLLCBVvB5+I1dc8IAb/gHLHkLqZcOI6DtzGCaT3Ex41/il4sGi/aSemiUC0m78DH+t/utRIE3Xw7kvFQDOakLiIpn+MHc2wuFurm5Q7kRnF4jlm7/DZseLXl3+QXuPxiHHbu7oZoTDEp3Mpf7lRupeArMM7KaXVPC01q92ikmzsZgVPaUfIsEGR9Je6Il8L+67ViuqPnz+HQ76qOF1Rc2u4x/vuGVCbrUO+UxOA74j1CurZhcl/8TvahtQzk2bedoJqYIn+6gYNl1gx9Kudl+6qykYZ5hnASLxfL07zxQToGumnuZSF/y5T8FwPhRTVsxRbSDvyjqqnEeLtm8xAmfePOOU5+mhVk9mawdRIEY5C0YOvHt51XVVlJYhmJ+8lAwf6udQSghd1ep6ai8u5px3cLIcQW0fILetkpBCslm80bdC8eWHF6rsgzupgLKyoeLLsCYq1S4yflska4BIgl541TwM/yGdj0FcsBb74CBaW32aWilfVQX1XKSBxDCBwaADAgEXooG5BIG2YoHpdsD4wwi0FOcv0DglH2YMimzgcOhLfuDoAZl/9PHPwuDkIB/pxD8450pg37Vy8qdjbEBr03F0DmLClYk83wDsG1k/ojJsPVK+S3YUIT8tLi6YpDEKBVa9yZJKsMZnJwJ5bPHYZhiGTwVVe1Yp7nTWVrH9hK6Fj+w1Up1VhEB058CZurSRr87a4VTrSLYumkm10DE41vcKJFSXIOdK1WbHGQZPkzJEJEZYtx283QthEoBhC/A=' 
from squid (length: 1795).
2009/06/04 20:05:20| squid_kerb_auth: Decode 
'YIIFOwYGKwYBBQUCoIIFLzCCBBAGCNwICCqKCBQEEggT9YIIE+QYJKoZIhvcSAQICAQBuggToMIIE5KADAgEFoQMCAQ6iBwMFACAAAACjggQGYYIEAjCCA/6gAwIBBaEQGw5XSU4yMDAzUjIuSE9NRaInMCWgAVFAbFG9wZW5zdXNlMTEuc3VzZS5ob21lo4IDujCCA7agAwIBF6EDAgECooIDqASCA6RZPrqPB92Snu75XOUv49L/C+gSY80HNNF2hWOTmasisJv60HGOyJa2y+gFEHJzOUAziJConuwfKS8HT0L43pysD5nwC5q13SM2bXHTA2p3dRhSEO7RlCHILEIPTXWQd20VFJmWo1Z0ONTgqisJIWd44u8F6FWrzi4x4oAAOjfCYFa/ekXdwHpaY3x5gya5UGAU9a2m+T5v2C3klW1EdXStbe8JBKZFuXMqVW8TW6Slikdc9CEvCvvET0k0TKjv1+iBvifLfoCHELdwEnTrfbskuPeDor9Ji00OTgQFyTYNZFyG0OJJp8R5PcwcN+WC8eOSDBPf9Xqr5slKC6QNWO7/KTmKwUpha5hrP8mQCJ9kHgHAprtIXBTo3Qa49tUsfosVnUoyKNQu1boiq227pq8F55us0y9BAKKaecWhRlPRhVHYpvSYYv/cFxTcvh65zLXU3XpaKppmQyaGVoIwhASz+jlL9oQbcAXPyrB4bG3ANQRACAADKmApTNkB22Oq5ns6j0Go3rTzdjlbDnBJ5n+hwI4T8TmHCHJ21x234bwVSu/Sz90kEau1tCXETJXpHUha18Oe6JHNFQdcGSYp+L3On+XTDCGALAp3hGWuWL4ck12euE2ybNjojwL3BxhHn3Yb29vYnrHbDDM4+J1WDXqTkGtFvsW+iF8To8oj1Bh4hBZO14pfkQy85C2v7C3pBGYfw3CCuGvynRObfSRFQeFfFBUZ9diBDszwMJkLLCBVvB5+I1dc8IAb/gHLHkLqZcOI6DtzGCaT3Ex41/il4sGi/aSemiUC0m78DH+t/utRIE3Xw7kvFQDOakLiIpn+MHc2wuFurm5Q7kRnF4jlm7/DZseLXl3+QXuPxiHHbu7oZoTDEp3Mpf7lRupeArMM7KaXVPC01q92ikmzsZgVPaUfIsEGR9Je6Il8L+67ViuqPnz+HQ76qOF1Rc2u4x/vuGVCbrUO+UxOA74j1CurZhcl/8TvahtQzk2bedoJqYIn+6gYNl1gx9Kudl+6qykYZ5hnASLxfL07zxQToGumnuZSF/y5T8FwPhRTVsxRbSDvyjqqnEeLtm8xAmfePOOU5+mhVk9mawdRIEY5C0YOvHt51XVVlJYhmJ+8lAwf6udQSghd1ep6ai8u5px3cLIcQW0fILetkpBCslm80bdC8eWHF6rsgzupgLKyoeLLsCYq1S4yflska4BIgl541TwM/yGdj0FcsBb74CBaW32aWilfVQX1XKSBxDCBwaADAgEXooG5BIG2YoHpdsD4wwi0FOcv0DglH2YMimzgcOhLfuDoAZl/9PHPwuDkIB/pxD8450pg37Vy8qdjbEBr03F0DmLClYk83wDsG1k/ojJsPVK+S3YUIT8tLi6YpDEKBVa9yZJKsMZnJwJ5bPHYZhiGTwVVe1Yp7nTWVrH9hK6Fj+w1Up1VhEB058CZurSRr87a4VTrSLYumkm10DE41vcKJFSXIOdK1WbHGQZPkzJEJEZYtx283QthEoBhC/A=' 
(decoded length: 1343).
2009/06/04 20:05:20| squid_kerb_auth: gss_accept_sec_context() failed: 
Unspecified GSS failure.  Minor code may provide more information. Key table 
entry not found
2009/06/04 20:05:20| authenticateNegotiateHandleReply: Error validating user 
via Negotiate. Error returned 'BH gss_accept_sec_context() failed: 
Unspecified GSS failure.  Minor code may provide more information. Key table 
entry not found'


and in a working setup

2009/06/04 20:08:31| squid_kerb_auth: Got 'YR 
YIIFBgYGKwYBBQUCoIIE+jCCBPagJDAiBgkqhEggTIYIIExAYJKoZIhvcSAQICAQBuggSzMIIEr6ADAgEFoQMCAQ6iBwMFACAAAACjggPRYYIDzTCCA8mgAwIBBaELGwlTVVNFLkhPTUWiJzAloAMCAQKhHjAcGwRIVFRQGxRkYW50ZXNvY2tzLnN1c2UuaG9tZaOCA4owggOGoAMCARehAwIBA6KCA3gEggN0AuvNgFcwkDJgP6V86tskDNI56p4d7Cd9grLBkJfH7d3J9dMPHIm2rBMBO0M/oGDpcxB/DSTvMGzBKMlyvZ/lFuzqaS90ojismiEa0AovbsRxudk4KGP7GQYFe29sSd/uW9NgR5qqsz1nS6xNxIrEmBMo3WovTgcrfb8RWuF6hUFrrtV01zGb3GgPktQMFhAQKercxUn0KwZjJga1BmK0OoL/bjJ3aUax9kPugJL1mCC8z85F1ffAXLDQ0uuEeXMTl8i3neJmsGNpd4+bp8FYaPtM3AGKm3mpkfSIcQ9aJTJCGNxGqRVtHlXT3NGgE7TPvE79VHFjWitwOH466k3vlRCA7euhXPntyxH9Kd0P1uY+PI/9N2NbcnNkqvyy2JU86SWfh9s7O7WBJWxOfhVzetNhlLHUBx4B4rrb8yT1W+OCEIsJHT/gH8pZmkOxUfrM6Y0Tmy915pqZWgRJDlmbW1ybPdlI+wIXUL06zEIEa7JlLFFx2ItOlLsR7su1n4OOTeQKWWg8jWwuTpsBnzC15BqN2xx75xe3KoudkdM5pmW1H2qnwYDMkvkfsMGJaXluzhrHOOK7mInN93piLZ3MMeWfG7MJOkK89en5PD63tZrwt/m233Pn/7+FDBaJKdQGsxLKrzAWVzO4yazBJYGC8dKzXqNCUbK1V0we/o8YzhnhDf8K24u+Tpab+63rCctzZNJqqVXu+7WLmTHC14ibAI8lefWwp3BAI8zXDUezpYu0ktUU4npbIGJzx6vi63eVCTqaJfqR0p8udAwOvxbs56O59uEsJVjZXvcySBGT2ok3qbWepBJI/1DcHFS1F0yKU31hvepDoVW9AhHMHhAezSsdaPp+E2rowplJAtruKMl8W0B8Evgr6akYed1PSoqmOV5sV3unA4JJgiFZrngwEYKAPCLqQT4kmUPWgKYfeXwvf6tLeQXcbAK+D63DOLwtlw1LVL8c7bmw+bXEfwRVrGmM6Z6qPE5YGPwlgrYMqxnv0nwzqXjdQFQyYURqFBy9jfHlBbNm3pnYIfxU14Ysvo/EeAQjT7SCL6U/FsvKlfkNyTHYXVv2RNZM1LyAqJib1dKUajcgJIQeNOdRfWd0idrCa+gwmMiNs4P9lDnWDZ3mNEMyWNnHukM93+sSbLuZQCif1rUSjr6OaEY1x/EH+rgo1JmkgcQwgcGgAwIBF6KBuQSBtpRpms2A+yy9glU2IAG1yGzmJ8WKIj+Q0+N+Wy5LjeDEGzrvjZm+LRQmX69nCtpx2WypnlRF7YIxnyh/QAhWuFIcT7TB7L5IVOnILrdIEkYc7B/RsVbWicBRIgGF+9h1/6dbfgVCiUSdxQCPQsbdHZNAhWoBNrDEYAPZzEc5EDK9+yJuIs0vOZBikNFbQ/iMeBy2it6pr1TzwuekIi616WRzIuu50JGxerw5xDWfcgJdYfpknqJB' 
from squid (length: 1723).
2009/06/04 20:08:31| squid_kerb_auth: Decode 
'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' 
(decoded length: 1290).
2009/06/04 20:08:31| squid_kerb_auth: AF 
oYGgMIGdoAMKAQChCwYJKoZIgvcSAQICooGIBIGFYIGCBgkqhkiG9xIBAgICAG9zMHGgAwIBBaEDAgEPomUwY6ADAgEXolwEWorEpeqdOTGNwrBCg/RdxWQwe97t9FZ7Vy4vo2OzBoTqOO2F6F97fiLt54EHELzL56z0eTApRId0i6cZjz1WC1Nrori6Yjss5gZ6Szk+wPNyoOWT0nLJUHZ0kw== 
Administrator@xxxxxxxxxxxxxx

> -
> --
> ---
> Always try to find truth!!!
Regards
Markus
>