Hi Markus. my proxy hostname is [root@proxy01 squid]# hostname -f proxy01.deeplayer.com I use the CLI below to create the keytab. msktutil -c -b "CN=COMPUTERS" -s HTTP/proxy02.deeplayer.com -k /etc/squid/squid.keytab --computer-name proxy02 --upn HTTP/proxy02.deeplayer.com --server dc1.deeplayer.com --verbose --enctypes 28 Cld u pls help to confirm my CLI is ok. My DC (dc1.deeplayer.com) is windows 2008 R2 at 2003 functional level. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-proxy-kerberos-authentication-failure-Help-tp4663964p4663973.html Sent from the Squid - Users mailing list archive at Nabble.com.