Search squid archive

NTLM Auth fails while using DNS instead of IP address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

i recently configured a squid 3.3.8 on an ubuntu 14.04 trusty host using
NTLM/Kerberos auth. My configuration is mostly based on a config example
on squid-cache.org [1].

It took me a day to figure out why the following messages appeared in my
/var/log/squid3/cache.log:

> 2014/11/10 06:32:16| negotiate_kerberos_auth: ERROR: gss_accept_sec_context() failed: Unspecified GSS failure.  Minor code may provide more information.
> 2014/11/10 06:32:16| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_accept_sec_context() failed: Unspecified GSS failure.  Minor code may provide more information.'
> 2014/11/10 06:32:16| negotiate_wrapper: Return 'BH gss_accept_sec_context() failed: Unspecified GSS failure.  Minor code may provide more information.'


After debugging and running each command seperately i discored that the
problem lies within the client proxy settings.

If i use the IP address instead of the hostname of the squid server, the
authentication works fine.

What could that possibly be? The error message is kind of "unhelpful".

[1]
http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory

Thanks for help in advance,
Schinken

---
Backspace e.V.
http://hackerspace-bamberg.de

mail: schinken@xxxxxxxxxxxxxxxxxxxxxx
xmpp: schinken@xxxxxxxxxxx (otr)
GPG: FFB7 E40D B2DD D24C C9B7 B5C5 703C F8B8 882C 871E


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux