On Mon, Apr 16, 2012 at 11:06:38AM +0100, Markus Moeller wrote: > > The best tool is msktutil, which creates a computer account and assings > the HTTP/<squid-fqdn> service principal to it. Unfortunately, that tool is not in RHEL5.x, I think I tried to build it but had problems probably related to what Simon noted about krb5-lib. What we have works (even from behind a load balancer...) and we can live with the password expiry in our situation. -- Brett Lymn "Warning: The information contained in this email and any attached files is confidential to BAE Systems Australia. If you are not the intended recipient, any use, disclosure or copying of this email or any attachments is expressly prohibited. If you have received this email in error, please notify us immediately. VIRUS: Every care has been taken to ensure this email and its attachments are virus free, however, any loss or damage incurred in using this email is not the sender's responsibility. It is your responsibility to ensure virus checks are completed before installing any data sent in this email to your computer."