Re: squid proxy kerberos authentication failure. Help!!!

["Markus Moeller" <huaraz@xxxxxxxxxxxxxxxx>]

I assume the *s are not in the real file.  Can you run a strace against the 
auth helper to verify the right keytab is used ?

Markus

"flypast"  wrote in message news:1387953737367-4664034.post@xxxxxxxxxxxxx...

Hi Marcus,

Please see my current /etc/init.d/squid file. I had added your suggested
content.

[root@proxy01 ~]# cd /etc/init.d/
[root@proxy01 init.d]# more squid
#!/bin/bash
# chkconfig: - 90 25
# pidfile: /var/run/squid.pid
# config: /etc/squid/squid.conf
#
### BEGIN INIT INFO
# Provides: squid
# Short-Description: starting and stopping Squid Internet Object Cache
# Description: Squid - Internet Object Cache. Internet object caching is \
#       a way to store requested Internet objects (i.e., data available \
#       via the HTTP, FTP, and gopher protocols) on a system closer to the \
#       requesting site than to the source. Web browsers can then use the \
#       local Squid cache as a proxy HTTP server, reducing access time as \
#       well as bandwidth consumption.
### END INIT INFO


PATH=/usr/bin:/sbin:/bin:/usr/sbin
export PATH

# Source function library.
. /etc/rc.d/init.d/functions

# Source networking configuration.
. /etc/sysconfig/network

if [ -f /etc/sysconfig/squid ]; then
       . /etc/sysconfig/squid
fi

# don't raise an error if the config file is incomplete
# set defaults instead:
SQUID_OPTS=${SQUID_OPTS:-""}
SQUID_PIDFILE_TIMEOUT=${SQUID_PIDFILE_TIMEOUT:-20}
SQUID_SHUTDOWN_TIMEOUT=${SQUID_SHUTDOWN_TIMEOUT:-100}
SQUID_CONF=${SQUID_CONF:-"/etc/squid/squid.conf"}

# determine the name of the squid binary
[ -f /usr/sbin/squid ] && SQUID=squid

prog="$SQUID"

# determine which one is the cache_swap directory
CACHE_SWAP=`sed -e 's/#.*//g' $SQUID_CONF | \
       grep cache_dir | awk '{ print $3 }'`

RETVAL=0

probe() {
       # Check that networking is up.
       [ ${NETWORKING} = "no" ] && exit 1

       [ `id -u` -ne 0 ] && exit 4

       # check if the squid conf file is present
       [ -f $SQUID_CONF ] || exit 6
}

start() {
     *  KRB5_KTNAME=/etc/squid/squid.keytab
       export KRB5_KTNAME*
       probe

       parse=`$SQUID -k parse -f $SQUID_CONF 2>&1`
       RETVAL=$?
       if [ $RETVAL -ne 0 ]; then
               echo -n $"Starting $prog: "
               echo_failure
               echo
               echo "$parse"
               return 1
       fi
       for adir in $CACHE_SWAP; do
               if [ ! -d $adir/00 ]; then
                       echo -n "init_cache_dir $adir... "
                       $SQUID -z -F -f $SQUID_CONF >>
/var/log/squid/squid.out 2>&1
               fi
       done
       echo -n $"Starting $prog: "
       $SQUID $SQUID_OPTS -f $SQUID_CONF >> /var/log/squid/squid.out 2>&1
       RETVAL=$?
       if [ $RETVAL -eq 0 ]; then
               timeout=0;
               while : ; do
                       [ ! -f /var/run/squid.pid ] || break
                       if [ $timeout -ge $SQUID_PIDFILE_TIMEOUT ]; then
                               RETVAL=1
                               break
                       fi
                       sleep 1 && echo -n "."
                       timeout=$((timeout+1))
               done
       fi
       [ $RETVAL -eq 0 ] && touch /var/lock/subsys/$SQUID
       [ $RETVAL -eq 0 ] && echo_success
       [ $RETVAL -ne 0 ] && echo_failure
       echo
       return $RETVAL
}

stop() {
       echo -n $"Stopping $prog: "
       $SQUID -k check -f $SQUID_CONF >> /var/log/squid/squid.out 2>&1
       RETVAL=$?
       if [ $RETVAL -eq 0 ] ; then
               $SQUID -k shutdown -f $SQUID_CONF &
               rm -f /var/lock/subsys/$SQUID
               timeout=0
               while : ; do
                       [ -f /var/run/squid.pid ] || break
                       if [ $timeout -ge $SQUID_SHUTDOWN_TIMEOUT ]; then
                               echo
                               return 1
                       fi
                       sleep 2 && echo -n "."
                       timeout=$((timeout+2))



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-proxy-kerberos-authentication-failure-Help-tp4663964p4664034.html
Sent from the Squid - Users mailing list archive at Nabble.com.