Re: [squid-users] kerberos annoyances

On Mon, 14 Oct 2013 18:17:30 +0300
Pavel Kazlenka <pavel.kazlenka_at_measurement-factory.com> wrote:

> Squid's kerberos helper has debug mode. Just add '-d' switch to
> 'auth_param negotiate program /usr/sbin/squid_kerb_auth' string in
> squid.conf file.
> Also here are some useful information and tips:
> http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos#Troubleshooting_Tools

I have enabled debug and I see this in cache.log:

2013/10/14 17:23:12 kid1| WARNING: Error Pages Missing Language: sr-latn-rs
negotiate_kerberos_auth.cc(315): pid=879 :2013/10/14 17:23:12| negotiate_kerberos_auth: DEBUG: Got 'YR YIIHdwYGKwYBBQUCoIIHazCCB2egMDAuBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKwYBBAGCNwICHgYKKwYBBAGCNwICCqKCBzEEggctYIIHKQYJKoZIhvcSAQICAQBuggcYMIIHFKADAgEFoQMCAQ6iBwMFACAAAACjggWdYYIFmTCCBZWgAwIBBaEPGw1LQVBQQVNUQVIuQ09Noi0wK6ADAgECoSQwIhsESFRUUBsacnNiZ3l1Y25peDA1LmthcHBhc3Rhci5jb22jggVMMIIFSKADAgEXoQMCAQ6iggU6BIIFNlB3N/m9IYxDsJK36iq0E3nGNDu2U5t+YHbv0kvADdS6JyRAiMPe+tdU3rWAjGNraaIQ/m55CGlJ4RUvBx567CW7OKhwqK21vygyX3Gubhbunq1+sxMIZ/kg2+wU/enIH2sNfAhTY2hnd1s9IdrpBV4XNVy1F+j4E3n1aHoeiE0PFKKZ9ZOpGSOSAuELD9V8S+5Q4J3uEOIeHm+dWGBla1eFwJA/3oo8m0NwI0iD+0UnLKBm/Jssr7oZM/yoBV3WbNxVYrbxmMItT94SUTsxoK/Cl4wa56GAiYzDOS6viQb6aOQv+Oo6glPtmiYw1MG5gRL2vWbbmjSlYV3rAJnMokUAQYyhWDVDeSrUMsMS1MnE6adNAj5jm6JigYPoZj6+Ln7YDy/BSw4YRJCHp7vm4DK1jSEJ0rJgheD01XSO/BZFknelbMCrYK69Rv8MEJL9NyZ8gwmqalPSuR1UQ3URd6f14cFB1x9nLs50P0fxJ72Htm0LCJyMTr0sr1IdzIqZpUfckjoY/Bg7eirTsYQjHxYC/n3FbSU984lm5DTjfj5t4Zw0Y8CYYWGYlQYv7103KuGJIP8UX+b8vJZDzpXlRhtuu3EITQDEaVWgazkz98hCX7Iq4LCtrLuuTpaOdHxR5HM5raIVZwBdgMKKui3MaSZNMVK94IS5pIxEyOm2ltLRMJIhOrDxHwwCdrcOoRLbkb8QRoHLFJpKoC4OkeasUybLFCkJ9WB614pKPF1A7iNLvaOVUQpShl1cMZ7PA2u5YpqMjH/KPJLEEYzMTVREPb4atqQAAZYrv0yKFKtcGkiFYxCX4ihvqAEmBPRrsTz7tYSuCS7+3k0ctGNul9HZf94trWRMLrNDk+rKe2JeKQl+JRR/+txrzWU3OxYyY8ABXvkzZhKQXkptlZf1Rj720+VJA/hRp93iC/ODBKVbLe9Clq/uTMue1spOG+brw3qQ95tGvtZ6qwWA2PPv6GjunKdkOTbLCGnQgDlEW/i2ipGkerj4AifIF7vWGk5vNPSCj8jyIjWQc+m/Iela1KNvhaGCU+zmD2d7PebC9K4DchQ7o8hwZZPkMWaMntWQ+3NmbzGzrW5Mx2hv6y8JrrCY0iEwjaYLGFqvOMt3qIi7Un/Vbw28okNQVNnS9cbQORp9NqtV5P0jd3F62VGU5lV2DPC9IiZH3qs6zdmiLV529qp6UsbCORnxFDm44OXJ7IvLbpM8fXE6a4MMSGooHurgJBRPEkNyI3neR9upLPR6HPvgyLGxWPqZVS2BeL0+Mu+jyxJ1n0JamsaMInE/ihO8CthsvRpE2C+LqwLUeI0LYK6/xhp21cAccGcRsxQrbmE5CfIZ4Qv9wBKItpFvtjul3wWxptXwoWdtoWTYLeKgp1LMxFcnbRpAmt3MXmH+NA5DLNxRXEZqqo/XBSWrxpWS+lzHDD2eMhxRTaI7pxATGWMCswOO6fMMqjiEwQQyxfDmcSosBIjaonkYMfvmSRtDFfDktyZdGM9T3xNK9m4PKWG+ZVuHDL6D827pug//fnJM60j4+pdNkfRQvHDK0C7lj71AVbplDONGw8IUZ6kmzEavNCaIqMa7XlXoVep5rItXHapVX8Y0fRzc6W38OVYVxS6q6fdQCi9qs5n8kKLcWW/WXcohGVzm8/mtzzXp5N8Vdd9KdSFt5/7izOFbWYZ0hURCRiNt0VNLCJP2pGNy2Grk0cN3gwN7dfpGj5jCtL0UIVETgSaQuccqfAcPx1NG+lg3RQBdC8gF3aHbPMou48BC5znOb6umpIIBXDCCAVigAwIBF6KCAU8EggFL1jMIlLTJr5h/fsjCjSfVB/Ko2PXflioTcmVRAlL5ql3NSVs4h0TRqzTLrzp9y2s8603JkP29jHB1AVEqGsi+s0VtzvbZZlWmvByLymIoZBBE3zPAkv0QbILuLXWtiSNIO9Z57WS+0cwKqQ2abb2TxN0kNRofWqhUdgK4TftkS4mVlMr26k68VhvFyIGulxFiCpzpSkWsJ/PWuH5sbNHDkRLKxcPizWv/hpm08THroad2ucnOoc6acJhdk1LqaUfXpPCveG6/36zS2Fknda/ONoj1t3ZwyeTAUMpobwc2Hcety0jQoedF5JQTXEVRR/FQNTw+Ozpw85/GOmqhCdLazpubmJ0NuvIFkcENKltUT/UojuhuaqJEL8xfpOWUmwUKmVqdNUM9MBmoKp5LiN6N4SD03Z7lavVnXDjrqZRbfzX1XJASTANqjSAnwA==' from squid (length: 2559).
negotiate_kerberos_auth.cc(378): pid=879 :2013/10/14 17:23:12| negotiate_kerberos_auth: DEBUG: Decode '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' (decoded length: 1915).
negotiate_kerberos_auth.cc(200): pid=879 :2013/10/14 17:23:12| negotiate_kerberos_auth: ERROR: gss_acquire_cred() failed: No credentials were supplied, or the credentials were unavailable or inaccessible.. unknown mech-code 0 for mech unknown
2013/10/14 17:23:12| negotiate_kerberos_auth: INFO: User not authenticated
2013/10/14 17:23:12 kid1| ERROR: Negotiate Authentication validating user. Error returned 'BH gss_acquire_cred() failed: No credentials were supplied, or the credentials were unavailable or inaccessible.. unknown mech-code 0 for mech unknown'
2013/10/14 17:23:12 kid1| '/usr/local/etc/squid/errors/sr-latn-rs/ERR_CACHE_ACCESS_DENIED': (2) No such file or directory
2013/10/14 17:23:12 kid1| WARNING: Error Pages Missing Language: sr-latn-rs

Unfortunately it doesn't mean much to me. Hope someone can give me a clue.

-- 
Marko Cupać