Thanks Nick and Markus You were right about permissions. Before check it for helper but forgot do this for keytab file. Now for helper is 0755 and for keytab 0666 (for testing period). One step forward, but now i have another error in cache.log ... glrUbv5/nTtm0eRDjSLMllQnILqhEV+fsjinx+HOHYQ= =' (decoded length: 1642). 2010/10/26 10:47:13.119| commio_finish_callback: called for FD 10 (0, 0) 2010/10/26 10:47:13| squid_kerb_auth: ERROR: gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information. 2010/10/26 10:47:13.144| comm_read_try: FD 10, size 8191, retval 104, errno 0 2010/10/26 10:47:13.144| commio_finish_callback: called for FD 10 (0, 0) 2010/10/26 10:47:13.144| comm.cc(165) will call SomeCommReadHandler(FD 10, data=0x83aaf30, size=104, buf=0x83ab140) [call4] 2010/10/26 10:47:13.145| entering SomeCommReadHandler(FD 10, data=0x83aaf30, size=104, buf=0x83ab140) 2010/10/26 10:47:13.145| AsyncCall.cc(32) make: make call SomeCommReadHandler [call4] 2010/10/26 10:47:13.145| helperStatefulHandleRead: end of reply found 2010/10/26 10:47:13.145| helper.cc(375) helperStatefulReleaseServer: srv-0 flags.reserved = 1 2010/10/26 10:47:13.145| authenticateNegotiateHandleReply: Error validating user via Negotiate. Error returned 'BH gss_accept_sec_co ntext() failed: Unspecified GSS failure. Minor code may provide more information. ' Thanks for your help!!! -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Problem-with-SQUID-KERB-LDAP-tp1468788p3013270.html Sent from the Squid - Users mailing list archive at Nabble.com.