Hi Victor,
In the helpers/negotiate_auth/kerberos directory is a script
test_negotiate_auth.sh to test authentication outside of squid. Change dir
to your binary directory and do the following ( please adapt to your
environment):
export KRB5_KTNAME=squid-win.keytab
kinit mm@xxxxxxxxxxxxxx
Password for mm@xxxxxxxxxxxxxx:
markus@opensuse12:/tmp> ./test_negotiate_auth.sh opensuse12.suse.home
negotiate_kerberos_auth.cc(218): pid=29699 :2014/10/07 22:59:56|
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
negotiate_kerberos_auth.cc(264): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: DEBUG: Got 'YR
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'
from squid (length: 1683).
negotiate_kerberos_auth.cc(317): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: DEBUG: Decode
'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'
(decoded length: 1260).
negotiate_kerberos_pac.cc(382): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: INFO: Got PAC data of lengh 480
negotiate_kerberos_pac.cc(200): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: INFO: Found 4 rids
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: Info: Got rid: 1108
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: Info: Got rid: 513
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: Info: Got rid: 1132
negotiate_kerberos_pac.cc(207): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: Info: Got rid: 1209
negotiate_kerberos_pac.cc(269): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: INFO: Got DomainLogonId
S-1-5-21-1828870822-1098772068-2592627279
negotiate_kerberos_pac.cc(291): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: INFO: Found 1 ExtraSIDs
negotiate_kerberos_pac.cc(339): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: INFO: Got ExtraSid
S-1-5-21-1828870822-1098772068-2592627279-1107
negotiate_kerberos_pac.cc(462): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: INFO: Read 480 of 480 bytes
negotiate_kerberos_auth.cc(432): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: DEBUG: Groups
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaVAQAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaAQIAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiabAQAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiauQQAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaUwQAAA==
AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== mm@xxxxxxxxxxxxxx
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaVAQAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaAQIAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiabAQAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiauQQAAA==
group=AQUAAAAAAAUVAAAAploCbWTufUFPWoiaUwQAAA==
negotiate_kerberos_auth.cc(437): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: DEBUG: AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg==
mm@xxxxxxxxxxxxxx
negotiate_kerberos_auth.cc(264): pid=29699 :2014/10/07 22:59:57|
negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
BH quit command
Let me know what you get. BTW on which platform with which Kerberos
library( MIT or Heimdal) is this ?
Markus
"Victor Sudakov" wrote in message
news:20141007083542.GA60425@xxxxxxxxxxxxxxxxxxxxxx...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
And my Kerberos server setup seems valid:
$ setenv KRB5_KTNAME /usr/local/etc/squid/squid.keytab
$ setenv KRB5_CONFIG /usr/local/etc/squid/krb5.conf
$ kdestroy
$ kinit -t $KRB5_KTNAME HTTP/proxy.sibptus.transneft.ru
$ klist
Credentials cache: FILE:/tmp/krb5cc_Ld5uU9
Principal:
HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx
Issued Expires Principal
Oct 7 15:33:42 Oct 8 01:33:42
krbtgt/SIBPTUS.TRANSNEFT.RU@xxxxxxxxxxxxxxxxxxxx
$
Victor Sudakov wrote:
Victor Sudakov wrote:
> > Well, I have tried negotiate_kerberos_auth with Firefox (Windows)
>
> I have tried the same with MSIE 8 (Windows).
After some adjustment to domain group policies, the Windows host is
at last requesting and successfully receiving the ticket for the proxy
service. Wireshark output:
User Datagram Protocol, Src Port: kerberos (88), Dst Port: dellpwrappks
(1266)
Kerberos TGS-REP
Pvno: 5
MSG Type: TGS-REP (13)
Client Realm: SIBPTUS.TRANSNEFT.RU
Client Name (Principal): vas-adm
Ticket
Tkt-vno: 5
Realm: SIBPTUS.TRANSNEFT.RU
Server Name (Service and Instance):
HTTP/proxy.sibptus.transneft.ru
enc-part rc4-hmac
Encryption type: rc4-hmac (23)
enc-part: 3e0fc357a26db7dcdb0a5b6436b56f9c96d15ad7626eea08...
enc-part rc4-hmac
Encryption type: rc4-hmac (23)
Kvno: 1
enc-part: db8c9ea1bf85c4bb5005103765767b692ed3c0f247c23d48...
The corresponding Kerberos principal is put into the keytab:
/usr/local/etc/squid/squid.keytab:
Vno Type Principal
1 des-cbc-crc
HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx
1 des-cbc-md5
HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx
1 arcfour-hmac-md5
HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx
1 aes256-cts-hmac-sha1-96
HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx
1 aes128-cts-hmac-sha1-96
HTTP/proxy.sibptus.transneft.ru@xxxxxxxxxxxxxxxxxxxx
The permissions on the keytab are correct. Squid receives it via the
environment:
env KRB5_KTNAME=/usr/local/etc/squid/squid.keytab \
KRB5_CONFIG=/usr/local/etc/squid/krb5.conf \
squid -f /usr/local/etc/squid/squid-test.conf
However, then actual autthentication begins, it fails with the:
"ERROR: gss_acquire_cred() failed: No credentials were
supplied, or the credentials were unavailable or inaccessible..
unknown mech-code 0 for mech unknown"
If someone finds something familiar in the below debug output, or can
low-level debug actual kerberos, could you please let me know. Thanks
a lot in advance for any help.
negotiate_kerberos_auth.cc(212): pid=40984 :2014/10/07 13:12:08|
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
negotiate_kerberos_auth.cc(258): pid=40980 :2014/10/07 13:12:37|
negotiate_kerberos_auth: DEBUG: Got 'YR
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'
from squid (length: 1747).
negotiate_kerberos_auth.cc(311): pid=40980 :2014/10/07 13:12:37|
negotiate_kerberos_auth: DEBUG: Decode
'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'
(decoded length: 1308).
negotiate_kerberos_auth.cc(128): pid=40980 :2014/10/07 13:12:37|
negotiate_kerberos_auth: ERROR: gss_acquire_cred() failed: No credentials
were supplied, or the credentials were unavailable or inaccessible..
unknown mech-code 0 for mech unknown
2014/10/07 13:12:37 kid1| ERROR: Negotiate Authentication validating user.
Result: {result=BH, notes={message: gss_acquire_cred() failed: No
credentials were supplied, or the credentials were unavailable or
inaccessible.. unknown mech-code 0 for mech unknown; }}
--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
sip:sudakov@xxxxxxxxxxxxxxxx
negotiate_kerberos_auth.cc(212): pid=40984 :2014/10/07 13:12:08|
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
negotiate_kerberos_auth.cc(258): pid=40980 :2014/10/07 13:12:37|
negotiate_kerberos_auth: DEBUG: Got 'YR
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'
from squid (length: 1747).
negotiate_kerberos_auth.cc(311): pid=40980 :2014/10/07 13:12:37|
negotiate_kerberos_auth: DEBUG: Decode
'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'
(decoded length: 1308).
negotiate_kerberos_auth.cc(128): pid=40980 :2014/10/07 13:12:37|
negotiate_kerberos_auth: ERROR: gss_acquire_cred() failed: No credentials
were supplied, or the credentials were unavailable or inaccessible..
unknown mech-code 0 for mech unknown
2014/10/07 13:12:37 kid1| ERROR: Negotiate Authentication validating user.
Result: {result=BH, notes={message: gss_acquire_cred() failed: No
credentials were supplied, or the credentials were unavailable or
inaccessible.. unknown mech-code 0 for mech unknown; }}
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
- --
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
sip:sudakov@xxxxxxxxxxxxxxxx
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBAgAGBQJUM6XeAAoJEA2k8lmbXsY0shEH/3k0EU+0PGD1iSx2OLqbkhGv
Z38OUous3LXoxpvOTSTP5mp+jVzutKBUlzqZbo5M0qNPg+WovNtDF2bqPK09scy8
Wuf+zfZv8YXQIvMemLXsnWZkIivLQ8Tgi6nAhX5fewP6zIfjRPMgqr86+ihHYZs4
HfO1IceZkitgeJx+9VvWDrRRDYIikTkXDLssfjFH+2J++tJikDWLqxoXykXTRRR3
xWNHomrRCxHw0q4KixCgefEnUDThvAK6MRnQA57t6xnTXiSTbqMSvkagLFgTLo87
OKI3ex+nVgyax1JZHJy1oOqXYJIeex+KxcLKkEzvXL9mdEUPgiJLg8FJD7rSDHE=
=hOY8
-----END PGP SIGNATURE-----
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
