Re: [squid-users] Re: Help me configure Kerberos Authentication

Amos, Even now I get these entries in my cache.log

[2011/04/30 14:55:08, 1] libsmb/ntlmssp.c:335(ntlmssp_update)
  got NTLMSSP command 3, expected 1
2011/04/30 14:55:08| negotiate_wrapper: Return 'NA = NT_STATUS_INVALID_PARAMETER

The whole point for me to move from ntlm to kerberos was to get rid of
these messages.

On 30 April 2011 14:13, Amos Jeffries <squid3_at_treenet.co.nz> wrote:
> On 30/04/11 21:58, Go Wow wrote:
>>
>> Thanks Amos.
>>
>> If I use negotiate_wrapper then I'm able to access websites using
>> squid (yes I dont get prompt for credentials) but I get many of these
>> messages in cache.log
>>
>> 2011/04/30 13:56:33| negotiate_wrapper: received type 3 NTLM token
>> 2011/04/30 13:56:33| negotiate_wrapper: Got 'KK
>>
>> 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'
>> from squid (length: 659).
>> 2011/04/30 13:56:33| negotiate_wrapper: Decode
>>
>> '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'
>> (decoded length: 492).
>> 2011/04/30 13:56:33| negotiate_wrapper: received type 3 NTLM token
>> 2011/04/30 13:56:33| negotiate_wrapper: Return 'AF = tim.panei
>> '
>> 2011/04/30 13:56:33| negotiate_wrapper: Return 'AF = tim.panei
>> '
>> 2011/04/30 13:56:33| negotiate_wrapper: Return 'AF = tim.panei
>> '
>> 2011/04/30 13:56:39| negotiate_wrapper: Got 'YR
>> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw==' from squid
>> (length: 59).
>> 2011/04/30 13:56:39| negotiate_wrapper: Decode
>> 'TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbAdAAAADw==' (decoded
>> length: 40).
>> 2011/04/30 13:56:39| negotiate_wrapper: received type 1 NTLM token
>> 2011/04/30 13:56:39| negotiate_wrapper: Return 'TT
>>
>> TlRMTVNTUAACAAAAEgASADAAAAAVgonioXIqyzNaOaMAAAAAAAAAAIgAiABCAAAATABBAEwAUwBHAFIATwBVAFAAAgASAEwAQQBMAFMARwBSAE8AVQBQAAEAFgBQAFIATwBYAFkAUwBFAFIAVgBFAFIABAAaAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0AAwAyAHAAcgBvAHgAeQBzAGUAcgB2AGUAcgAuAGwAYQBsAHMAZwByAG8AdQBwAC4AYwBvAG0AAAAAAA==
>> '
>> 2011/04/30 13:56:39| negotiate_wrapper: Got 'KK
>>
>> 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'
>> from squid (length: 659).
>> 2011/04/30 13:56:39| negotiate_wrapper: Decode
>>
>> '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'
>> (decoded length: 492).
>> 2011/04/30 13:56:39| negotiate_wrapper: received type 3 NTLM token
>> 2011/04/30 13:56:39| negotiate_wrapper: Return 'AF = tim.panei
>>
>>
>> Is this something of worry in long term?
>
> That is a success messages. But very verbose.
>
> Amos
> --
> Please be using
>  Current Stable Squid 2.7.STABLE9 or 3.1.12
>  Beta testers wanted for 3.2.0.7 and 3.1.12.1
>
Received on Sat Apr 30 2011 - 10:56:55 MDT