RE: [squid-users] ntlm_auth issue

From: Joseph L. Casale <JCasale_at_activenetwerx.com>
Date: Sun, 1 Nov 2009 22:30:12 +0000

>After configuring everything according to this :
>http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory
>I got this error :
>
> [2009/11/01 15:36:11, 0] libads/sasl.c:ads_sasl_spnego_bind(330)
> kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid
>credentials
> Failed to join domain: Invalid credentials
>
>Anyone ever facing the same problem or have any idea about this error?
>I cannot join Linux box the AD.
>FYI, kinit, net ads info and klist success (ticket acquired).

Well, starting with the obvious, how are you formatting the username you are
presenting? Do you have control over AD, are there any configuration settings
changed from the default such as those relating to locking it down?

Also, there is a much simpler approach here:
http://wiki.squid-cache.org/ConfigExamples/Authenticate/NtlmCentOS5
Received on Sun Nov 01 2009 - 22:30:21 MST

This archive was generated by hypermail 2.2.0 : Mon Nov 02 2009 - 12:00:02 MST