Comments for Klaubert's Blog http://klaubert.wordpress.com Security, Open Source, Network and IT world Fri, 06 Nov 2009 02:53:51 +0000 http://wordpress.com/ hourly 1 Comment on Squid kerberos authentication and ldap authorization in Active Directory by harry http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-174 harry Fri, 06 Nov 2009 02:53:51 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-174 Nice tutor... thanks.. Nice tutor… thanks..

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by Jorge Medina http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-173 Jorge Medina Tue, 06 Oct 2009 06:17:31 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-173 greenmango0 You can create the keytab on linux if you integrate samba using net commando, for example: # net ads keytab CREATE # net ads keytab ADD HTTP greenmango0

You can create the keytab on linux if you integrate samba using net commando, for example:

# net ads keytab CREATE
# net ads keytab ADD HTTP

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by anu http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-172 anu Wed, 16 Sep 2009 13:23:27 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-172 Its very helpful, thanx Its very helpful, thanx

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by greenmang0 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-125 greenmang0 Tue, 16 Jun 2009 06:36:02 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-125 no problem, thanks :) no problem, thanks :)

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by klaubert http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-124 klaubert Mon, 15 Jun 2009 12:09:56 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-124 Hi, its not exactly an option to make this file on windows, its mandatory, once that you will need to associate this the Windows User, that you create on AD, to be used on Squid. This, off course, if you want to use Windows AD as a Kerberos authentication. But if you want to use other Kerberos system (like MIT or Heimdal) you'll need to make an similar process there, but for now I can't help you on this. Best regards, Klaubert Hi,

its not exactly an option to make this file on windows, its mandatory, once that you will need to associate this the Windows User, that you create on AD, to be used on Squid. This, off course, if you want to use Windows AD as a Kerberos authentication.
But if you want to use other Kerberos system (like MIT or Heimdal) you’ll need to make an similar process there, but for now I can’t help you on this.

Best regards,

Klaubert

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by greenmang0 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-123 greenmang0 Mon, 15 Jun 2009 11:03:30 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-123 OK.. But there must be a way to create that file on gnu/linux machine. I want to create same file using gnu/linux and not Windows. Please let me know. I googled it but couldn't find anything helpful. :) OK.. But there must be a way to create that file on gnu/linux machine. I want to create same file using gnu/linux and not Windows. Please let me know. I googled it but couldn’t find anything helpful. :)

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by klaubert http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-122 klaubert Tue, 09 Jun 2009 15:49:18 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-122 Actually I do! In the post is the "Windows Step:", this step is done in Windows, but the file generated on it is used on Linux. :) Actually I do! In the post is the “Windows Step:”, this step is done in Windows, but the file generated on it is used on Linux. :)

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by greenmang0 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-121 greenmang0 Tue, 09 Jun 2009 10:48:10 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-121 I think you have not mentioned how to create a keytab file for linux. Or I failed to understand? I don't know. I am a complete n00b for Kerberos. I will be thankful to you if you let me know how to create keytab for linux. :-) I think you have not mentioned how to create a keytab file for linux. Or I failed to understand? I don’t know. I am a complete n00b for Kerberos. I will be thankful to you if you let me know how to create keytab for linux. :-)

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by klaubert http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-120 klaubert Mon, 30 Mar 2009 12:01:58 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-120 Hi Morgan, I actually don't remember to try access for ftp, so I can't answer you now. If I can try this lather I'll let you now. Klaubert Hi Morgan,

I actually don’t remember to try access for ftp, so I can’t answer you now. If I can try this lather I’ll let you now.

Klaubert

]]> Comment on Squid kerberos authentication and ldap authorization in Active Directory by Morgan LEFIEUX http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-119 Morgan LEFIEUX Mon, 30 Mar 2009 10:19:07 +0000 http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/#comment-119 Hi, thanks for this tutorial ! I've set up a Squid 2.7 on OpenBSD 4.4 and all works like a charm when trying to access with Firefox 3.0.7 to HTTP and HTTPS web sites: no authentication is asked to the users that have already opened their Windows session. But if i try a ftp request in Firefox like ftp://ftp.openbsd.org for example, Squid asks to authenticate again and again, however i can acces the ftp server. Any idea why the kerberos ticket is not used in this case ? Thanks Hi,
thanks for this tutorial ! I’ve set up a Squid 2.7 on OpenBSD 4.4 and all works like a charm when trying to access with Firefox 3.0.7 to HTTP and HTTPS web sites: no authentication is asked to the users that have already opened their Windows session. But if i try a ftp request in Firefox like ftp://ftp.openbsd.org for example, Squid asks to authenticate again and again, however i can acces the ftp server.

Any idea why the kerberos ticket is not used in this case ?

Thanks

]]>