Search squid archive

Re: Problem with Kerberos ticket keytab

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Also on a specific interval windows will automatically refresh kerberos tickets in the background but when depends on your domain settings and I am unsure about the default interval.

Am 5. Februar 2018 17:46:29 MEZ schrieb Enrico Heine <flashdown@xxxxxxxxxxxxx>:
Only users that can't use the proxy need to do it.

Am 5. Februar 2018 17:43:58 MEZ schrieb Enrico Heine <flashdown@xxxxxxxxxxxxx>:
This is maybe because the users have a old kerberos ticket and need to renew it. So simple solution for them is to log off and logon again to their windows PC or they can close the browsers and tools that need to authenticate against the proxy afterwards they should lock and directly unlock their station --> this will force windows to refresh their kerberos ticket. After all did it these messages will disappear, sometimes it's easier to tell the users to just restart their PC.

Am 5. Februar 2018 17:09:04 MEZ schrieb erdosain9 <erdosain9@xxxxxxxxx>:
Ok. 
Thanks

Know the ticket is fine, and is working (people are going throug internet
and i see in access.log there user names).... but... im having this error in
the log.

2018/02/05 12:56:46 kid1| ERROR: Negotiate Authentication validating user.
Result: {result=BH, notes={message: gss_accept_sec_context() failed:
Unspecified GSS failure. Minor code may provide more information. Cannot
decrypt ticket for HTTP/squid.domain.lan-DOMAIN.LAN using keytab key for
HTTP/squid.domain.lan-DOMAIN.LAN; }}
2018/02/05 12:57:55 kid1| ERROR: Negotiate Authentication validating user.
Result: {result=BH, notes={message: gss_accept_sec_context() failed:
Unspecified GSS failure. Minor code may provide more information. Cannot
decrypt ticket for HTTP/squid.domain.lan-DOMAIN.LAN using keytab key for
HTTP/squid.domain.lan-DOMAIN.LAN; }}
(END)

I change @ for -

Thanks.



--
Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html


squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux