You can use samba to create the keytab, but you mustn't use any samba daemon
as the daemon will reset the key in AD after a predefined time and thereby
invalidate the key in your keytab.
Regards
Markus
"Navas" <vmnavas@xxxxxxxxx> wrote in message
news:4c9801cd520a$34f4ee30$9edeca90$@gmail.com...
One more thing I am using Samba, I could not use mskutil. Is there any
issue
with Kerberos and Samba.
OS: Redhat EL6.2
squid-3.1
thanks,
-----Original Message-----
From: Markus Moeller [mailto:huaraz@xxxxxxxxxxxxxxxx]
Sent: Sunday, June 24, 2012 2:59 PM
To: squid-users@xxxxxxxxxxxxxxx
Subject: Re: Squid Kerberos authentication error
Can you check that the squid user has read access to the Kerberos keytab ?
Did you set the environment variable KRB5_KTNAME pointing to the Kerberos
keytab in the startup script ?
Markus
"Navas" <vmnavas@xxxxxxxxx> wrote in message
news:000301cd51e5$7f9e64e0$7edb2ea0$@gmail.com...
Hi,
I am trying to setup squid to authenticate as AD with kerberos as per
the following document
http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveD
irecto
ry
but I am getting following error in cache log,
authenticateNegotiateHandleReply: Error validating user via Negotiate.
Error
returned 'BH gss_acquire_cred() failed: Unspecified GSS failure.
Minor code may provide more information. Unknown error'
appreciated for your kind help ..
thanks,
abusam
