On 15/07/2016 4:07 a.m., Sergio Belkin wrote: > Hi, > > Using squid squid-3.5.19-1.el7.centos.x86_64, > > I obtain a kerberos ticket but I get the following when trying to use the > proxy: > > 2016/07/14 12:57:03.711 kid1| 29,4| UserRequest.cc(290) authenticate: No > Proxy-Auth header and no working alternative. Requesting auth header. > 2016/07/14 12:57:03.712 kid1| 29,9| UserRequest.cc(487) addReplyAuthHeader: > headertype:46 authuser:NULL > 2016/07/14 12:57:03.712 kid1| 29,9| Config.cc(188) fixHeader: Sending > type:46 header: 'Negotiate' > 2016/07/14 12:57:04.159 kid1| 29,4| UserRequest.cc(290) authenticate: No > Proxy-Auth header and no working alternative. Requesting auth header. > 2016/07/14 12:57:04.159 kid1| 29,9| UserRequest.cc(487) addReplyAuthHeader: > headertype:46 authuser:NULL > 2016/07/14 12:57:04.159 kid1| 29,9| Config.cc(188) fixHeader: Sending > type:46 header: 'Negotiate' > That looks like a debug log of Negotiate/Kerberos authentication beginning on two connections. A good secure client does not send credentials until it needs to. Squdi has received a request that it needs to authenticate, but does not yet have credentiasl. So it responds with a 407 or 401 message requesting the client send them using "Negotiate" auth protocol. No problem visible. <snip> > Please could you help me? Am I doing something wrong? Perhapse if you described what your problem was ? Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
