And before I forget and before somebody asks. In Firefox: network.negotiate-auth.allow-proxies=true network.negotiate-auth.gsslib="" network.negotiate-auth.using-native-gsslib=true Victor Sudakov wrote: > Rafael Akchurin wrote: > > I believe I do (but you made me doubt:) > > > > Well, I have tried negotiate_kerberos_auth with Firefox (Windows) and > they don't work together. I am attaching a packet dump which boils > down basically to the following: > > 1. proxy.sibptus.transneft.ru:3131 is configured in Firefox (new clean > profile) as a proxy server for all protocols. > > 2. Firefox receives an "HTTP/1.1 407 Proxy Authentication Required" > with the "Proxy-Authenticate: Negotiate" header. > > 3. A Kerberos ticket is requested by the Windows host from the domain > controller for 'df@SIBPTUS' or some such odd principal instead of > something like 'HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx'. > > 4. The domain controller predictably responds with 'PRINCIPAL UNKNOWN' > and proxy authentication fails. > > WTF is 'df@SIBPTUS' I have not the slightest idea. > > Any suggestions are welcome. > > -- > Victor Sudakov, VAS4-RIPE, VAS47-RIPN > sip:sudakov@xxxxxxxxxxxxxxxx -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:sudakov@xxxxxxxxxxxxxxxx _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
