[squid-users] Re: Keytab client not found in kerberos database

From: Markus Moeller <huaraz_at_moeller.plus.com>
Date: Fri, 3 Jan 2014 12:35:26 -0000

Hi Sarfraz,

  Which helpers do you run ? The message you see is most probably from the
kerberos_ldap_group helper and means that when the helper tries to
authenticate to AD the AD entry with an attribute
userprincipalname=HTTP/<squid-fqdn> can not be found.

squid-fqdn being the name you have in your squid keytab ( You can check
with klist -kt <squid.keytab> if you use MIT or ktutil -k <squid.keytab>
list for Heimdal).

Markus

"***some text missing***" wrote in message
news:1388733659.571.YahooMailNeo_at_web162403.mail.bf1.yahoo.com...

Hi,

Today i am having error in squid cache.log "error while initialising
credentials from keytab client not found in kerberos database squid".. My
clients that are authenticating through Active Directory fails to browse
internet on other hand IP Based access is working fine. Please help to
resolve this error. Thanks.

Regards,
Sarfraz
Received on Fri Jan 03 2014 - 12:35:46 MST

This archive was generated by hypermail 2.2.0 : Fri Jan 03 2014 - 12:00:03 MST