Nick Cairncross wrote: > > > Hi Paul, > Just my thoughts (which are minor in relation to the power of other > listers..!): Are you specifically running the 64-bit version of IE? How > does your DNS look? A/PTR records all in order? What does kerbtray show? > What encoding for kerberos are you using? What does klist -ekt <keytab> > show? Correct FQDN in your browser? > Cheers > Nick > I think we can exclude mistake in FQDN in browser, 64-bit version of browser (couse im' using 32-bit OS and browsers) In kerbtray i have some keys HTTP/squidhostname.domain.com - AES256-CTS-HMAC-SHA1-96 krbtgt/DOMAIN.COM - RSADSI-RC4-HMAC in keytab file 3 records with different encryption types: ArcFour with HMAC/md5 AES-128 CTS mode with 96-bit SHA-1 HMAC AES-256 CTS mode with 96-bit SHA-1 HMAC What about DNS, how this can affect on helper work? Regards, Dmitry Gorbunov -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Authentication-using-squid-kerb-auth-with-Internet-Explorer-8-on-Windows-Server-2008-R2-tp3013070p3013748.html Sent from the Squid - Users mailing list archive at Nabble.com.
