Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense 2.2 squid3.4 kerberos auth failure bug!

    Scheduled Pinned Locked Moved
    Cache/Proxy
    1
    3
    1.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      alxbob
      last edited by

      After a lot of digging around i cant get squid3 authenticate with kerberos… i have done it with squid2 with the same setup...
      In squid3  gssapi.spnego.so.10 is missing and kerberos wrapper cant handle authentication! Anyone got some fix for this bug?

      negotiate_kerberos_auth.cc(258): pid=34892 :2015/03/11 21:07:07| negotiate_kerberos_auth: DEBUG: Got 'YR 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' from squid (length: 2343).
      negotiate_kerberos_auth.cc(311): pid=34892 :2015/03/11 21:07:07| negotiate_kerberos_auth: DEBUG: Decode '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' (decoded length: 1754).
      dlopen: Cannot open "/usr/lib/libgssapi_spnego.so.10"

      1 Reply Last reply Reply Quote 0
      • A
        alxbob
        last edited by

        bug reported as far as i understand noone has implement squid3 kerberos auth on pfsense 2.2 very strange i cant find anything posted

        1 Reply Last reply Reply Quote 0
        • A
          alxbob
          last edited by

          The problem is squid version 3.4 is not compiled with ldap search custom sguid package should work

          1 Reply Last reply Reply Quote 0
          • First post
            Last post