Re: [squid-users] Re: Re: Kerberos with AD

From: Brett Lymn <brett.lymn_at_baesystems.com>
Date: Tue, 17 Apr 2012 09:50:44 +0930

On Mon, Apr 16, 2012 at 11:06:38AM +0100, Markus Moeller wrote:
>
> The best tool is msktutil, which creates a computer account and assings
> the HTTP/<squid-fqdn> service principal to it.

Unfortunately, that tool is not in RHEL5.x, I think I tried to build it
but had problems probably related to what Simon noted about krb5-lib.
What we have works (even from behind a load balancer...) and we can live
with the password expiry in our situation.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."
Received on Tue Apr 17 2012 - 01:51:22 MDT

This archive was generated by hypermail 2.2.0 : Tue Apr 17 2012 - 12:00:03 MDT