Topics

1

Web Proxy Filtering and Caching / Wrong KVNO in Squid configuration compared to the generated keytab

« on: November 20, 2024, 09:15:52 am »

Hello All,
Configuring the Squid with Kerberos enabled authentication, I get an error in cache.log:

kid1| ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: gss_accept_sec_context() failed: Unspecified GSS failure. Minor code may provide more information. Cannot find key for HTTP/myopnsensebox.domain.com@DOMAIN..COM kvno 1 in keytab; }}

And that is normal as the show keytab display that:

Keytab name: FILE:/usr/local/etc/squid/squid.keytab
KVNO Principal
---- --------------------------------------------------------------------------
   3 MYOPNSENSEBOX-K$@DOMAIN.COM
   3 MYOPNSENSEBOX-K$@DOMAIN.COM
   3 MYOPNSENSEBOX-K$@DOMAIN.COM
   3 host/myopnsensebox@DOMAIN.COM
   3 host/myopnsensebox@DOMAIN.COM
   3 host/myopnsensebox@DOMAIN.COM
   3 HTTP/myopnsensebox.domain.com@DOMAIN.COM
   3 HTTP/myopnsensebox.domain.com@DOMAIN.COM
   3 HTTP/myopnsensebox.domain.com@DOMAIN.COM

That are all in KVNO 3...

The question is: How to change the Squid configuration to ask for KVNO 3 ?

Thank you for your help.