Re: [squid-users] Active Directory Integrated Squid Proxy Guide

From: berry guru <berryguru_at_gmail.com>
Date: Tue, 10 Jan 2012 17:00:37 -0800

Thanks for responding back James. I'm new to Linux, and new to Squid
but I'm very intrigued and would like to learn. So I did a little
more digging through the configuration and I came across something.
I'm currently running Squid 2.7 (I'm a little afraid to do the upgrade
and mess something up, and don't know how yet) but in the config line
'default_keytab_name = /etc/squid3/PROXY.keytab' you list Squid3.
Could that be a problem?

As for my resolv.conf I simply have both of my internal DNS servers
listed. Not quite sure what else to verify. I've also added my Squid
box to the unlimited policy on my network to make sure nothing is
blocking it.

How can I go about troubleshooting this with logs maybe, if possible?

On Tue, Jan 10, 2012 at 1:15 PM, James Robertson <j_at_mesrobertson.com> wrote
> Hi Evan,
>
> You should probably double check your DNS on the proxy (resolv.conf)
> and the domain and look for any typo's in that and your kerberos
> config.
>
> The fact that it could not resolve one (or possibly more) of your KDC
> addresses could cause you problems later on - especially when msktutil
> needs to do --auto-updates.
>
> Cheers
>
> On 11 January 2012 07:33, berry guru <berryguru_at_gmail.com> wrote:
>> Hi James,
>>
>> So I don't mean to be a pest, but I've ran into another issue.  I've
>> ran the kinit administrator command but I'm getting the following
>> error:
>>
>> kinit: Cannot resolve network address for KDC in realm "COMPANY.LOCAL"
>> while getting initial credentials.
>>
>> I poked around online and I saw a few issues regarding my error, but
>> the resolve was making the realm all caps.
>>
>>
>> Cheers,
>>
>> Evan
>>
>>
>> On Sun, Jan 8, 2012 at 9:58 PM, James Robertson <j_at_mesrobertson.com> wrote:
>>> Hi Everyone,
>>>
>>> I just thought I would share a guide I am working on, it's not quite
>>> finished so expect errors, typo's etc.  I would love any feedback or
>>> critique about it.
>>>
>>> http://wiki.bitbinary.com/index.php/Active_Directory_Integrated_Squid_Proxy
>>>
>>> There is probably things that the developers and users will cringe at,
>>> if so I would like to know.
>>>
>>> Thanks for maintaining squid and the for the friendly mailing lists.
>>>
>>> Kind Regards,
>>>
>>> James
Received on Wed Jan 11 2012 - 01:00:44 MST

This archive was generated by hypermail 2.2.0 : Wed Jan 11 2012 - 12:00:02 MST