Hi Daniel,
If this happens for all client, then your environment is not correctly
setup. It basically means the client can not get a Kerberos ticket from the
kdc and falls back to NTLM instead.
Markus
"Daniel Faulknor" <danieljfaulknor_at_gmail.com> wrote in message
news:CAAo-Zhb9KmWk-jbBhsxgw+o7rS208Q6_YyCw1ZNffNDt82FMTg_at_mail.gmail.com...
> Hi,
>
> I've followed the
> http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory
> howto, and I am now getting this error in my cache.log
>
> 2011/07/15 12:13:45| squid_kerb_auth: WARNING: received type 1 NTLM token
> 2011/07/15 12:13:45| authenticateNegotiateHandleReply: Error
> validating user via Negotiate. Error returned 'BH received type 1 NTLM
> token'
> 2011/07/15 12:13:54| squid_kerb_auth: DEBUG: Got 'YR
> TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==' from squid
> (length: 59).
> 2011/07/15 12:13:54| squid_kerb_auth: DEBUG: Decode
> 'TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAGAbEdAAAADw==' (decoded
> length: 40).
> 2011/07/15 12:13:54| squid_kerb_auth: WARNING: received type 1 NTLM token
> 2011/07/15 12:13:54| authenticateNegotiateHandleReply: Error
> validating user via Negotiate. Error returned 'BH received type 1 NTLM
> token'
>
> This happens both when trying to access via the proxy using
> IE/Chrome/Firefox
>
> None of my googling as presented a solution
>
> Thanks
>
Received on Fri Jul 15 2011 - 19:08:08 MDT
This archive was generated by hypermail 2.2.0 : Sat Jul 16 2011 - 12:00:02 MDT