I believe I do (but you made me doubt:) Can you please check if your browser is set to use FQDN of proxy not proxy's IP address. Raf ________________________________________ From: Victor Sudakov <sudakov@xxxxxxxxxxxxxxxx> Sent: Friday, October 3, 2014 4:46 PM To: Rafael Akchurin Cc: Amos Jeffries; squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: leaking memory in squid 3.4.8 and 3.4.7. Rafael Akchurin wrote: > > Does Kerberos proxy authentication work with Firefox (Windows) at all? > > Success stories and recipes, anyone? > > If you see 'received type 1 NTLM token' message it means your IE was > not able to use the Kerberos auth and have chosen NTLM instead. Any ideas how I can figure out the cause thereof? I understand that the browser should be requesting a ticket for the HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx service from the domain controller. How can I find out why it is not requesting it or not receiving it? > Please ensure you are browsing from *domain joined* machine I certainly am. > and > using NTLM/Kerberos authentication wrapper as described in > http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory#Install_negotiate_wrapper. My objective is to enable Kerberos proxy authentication from domain joined Windows machines in MSIE, Firefox and possible Chrome. Why and when do I need this wrapper? Is squid's own negotiate_kerberos_auth plugin not good enough for my purpose? > > If you do not want to use NTLM I most certainly don't want to use NTLM. I want to use Kerberos with MSIE and Firefox. It is possible at all, especially with the latter? > then probably our humble guide will > be of any use - > http://docs.diladele.com/administrator_guide_3_4/installation_and_removal/active_directory/index.html I have basically done all that already, except the Basic auth and LDAP groups stuff. I don't want those for the present. Tell me please, after implementing your guide, do you enjoy Kerberos proxy authentication in Firefox, or does it fall back to Basic auth? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:sudakov@xxxxxxxxxxxxxxxx _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
