Amos, Even now I get these entries in my cache.log [2011/04/30 14:55:08, 1] libsmb/ntlmssp.c:335(ntlmssp_update) got NTLMSSP command 3, expected 1 2011/04/30 14:55:08| negotiate_wrapper: Return 'NA = NT_STATUS_INVALID_PARAMETER The whole point for me to move from ntlm to kerberos was to get rid of these messages. On 30 April 2011 14:13, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: > On 30/04/11 21:58, Go Wow wrote: >> >> Thanks Amos. >> >> If I use negotiate_wrapper then I'm able to access websites using >> squid (yes I dont get prompt for credentials) but I get many of these >> messages in cache.log >> >> 2011/04/30 13:56:33| negotiate_wrapper: received type 3 NTLM token >> 2011/04/30 13:56:33| negotiate_wrapper: Got 'KK >> >> TlRMTVNTUAADAAAAGAAYAJoAAAAqASoBsgAAABIAEgBYAAAAGgAaAGoAAAAWABYAhAAAABAAEADcAQAAFYKI4gYBsB0AAAAP7ybJT7FBFVDqpuR1XQqVQEwAQQBMAFMARwBSAE8AVQBQAHMAeQBlAGQALgBoAHUAcwBzAGEAaQBuAGkATABBAEwAUwAtAEkAVAAtADAANgA1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOZTezFHvWzJUXf3Tk1kBg4BAQAAAAAAAC7ki+QcB8wBLHpqvSKv9yAAAAAAAgASAEwAQQBMAFMARwBSAE8AVQBQAAEAFgBQAFIATwBYAFkAUwBFAFIAVgBFAFIABAAaAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0AAwAyAHAAcgBvAHgAeQBzAGUAcgB2AGUAcgAuAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0ACAAwADAAAAAAAAAAAAAAAAAwAADFSQt0HTDf8OpuYYkUMfen9wZfPrromcHVsBG/ndGpWgoAEAAAAAAAAAAAAAAAAAAAAAAACQAmAEgAVABUAFAALwAxADkAMgAuADEANgA4AC4AMQA4AC4AMgAyADUAAAAAAAAAAABuHEq3B9Rp3pJ7I5hc5aWd' >> from squid (length: 659). >> 2011/04/30 13:56:33| negotiate_wrapper: Decode >> >> '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' >> (decoded length: 492). >> 2011/04/30 13:56:33| negotiate_wrapper: received type 3 NTLM token >> 2011/04/30 13:56:33| negotiate_wrapper: Return 'AF = tim.panei >> ' >> 2011/04/30 13:56:33| negotiate_wrapper: Return 'AF = tim.panei >> ' >> 2011/04/30 13:56:33| negotiate_wrapper: Return 'AF = tim.panei >> ' >> 2011/04/30 13:56:39| negotiate_wrapper: Got 'YR >> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw==' from squid >> (length: 59). >> 2011/04/30 13:56:39| negotiate_wrapper: Decode >> 'TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw==' (decoded >> length: 40). >> 2011/04/30 13:56:39| negotiate_wrapper: received type 1 NTLM token >> 2011/04/30 13:56:39| negotiate_wrapper: Return 'TT >> >> TlRMTVNTUAACAAAAEgASADAAAAAVgonioXIqyzNaOaMAAAAAAAAAAIgAiABCAAAATABBAEwAUwBHAFIATwBVAFAAAgASAEwAQQBMAFMARwBSAE8AVQBQAAEAFgBQAFIATwBYAFkAUwBFAFIAVgBFAFIABAAaAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0AAwAyAHAAcgBvAHgAeQBzAGUAcgB2AGUAcgAuAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0AAAAAAA== >> ' >> 2011/04/30 13:56:39| negotiate_wrapper: Got 'KK >> >> TlRMTVNTUAADAAAAGAAYAJoAAAAqASoBsgAAABIAEgBYAAAAGgAaAGoAAAAWABYAhAAAABAAEADcAQAAFYKI4gYBsB0AAAAPdhlaEke/dDcr/4RKNRk2fUwAQQBMAFMARwBSAE8AVQBQAHMAeQBlAGQALgBoAHUAcwBzAGEAaQBuAGkATABBAEwAUwAtAEkAVAAtADAANgA1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgVcliSQLD7vvZarRF5Sr4BAQAAAAAAAMfbNugcB8wB+xR68ZbrWeIAAAAAAgASAEwAQQBMAFMARwBSAE8AVQBQAAEAFgBQAFIATwBYAFkAUwBFAFIAVgBFAFIABAAaAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0AAwAyAHAAcgBvAHgAeQBzAGUAcgB2AGUAcgAuAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0ACAAwADAAAAAAAAAAAAAAAAAwAADFSQt0HTDf8OpuYYkUMfen9wZfPrromcHVsBG/ndGpWgoAEAAAAAAAAAAAAAAAAAAAAAAACQAmAEgAVABUAFAALwAxADkAMgAuADEANgA4AC4AMQA4AC4AMgAyADUAAAAAAAAAAAA5+4TAEwsbC+LD4YC+Npm2' >> from squid (length: 659). >> 2011/04/30 13:56:39| negotiate_wrapper: Decode >> >> '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' >> (decoded length: 492). >> 2011/04/30 13:56:39| negotiate_wrapper: received type 3 NTLM token >> 2011/04/30 13:56:39| negotiate_wrapper: Return 'AF = tim.panei >> >> >> Is this something of worry in long term? > > That is a success messages. But very verbose. > > Amos > -- > Please be using > Current Stable Squid 2.7.STABLE9 or 3.1.12 > Beta testers wanted for 3.2.0.7 and 3.1.12.1 >
