Re: [squid-users] Re: Re: kerberos (AD) authentication - squid_kerb_auth

On Wed, Aug 26, 2009 at 10:42 PM, Markus Moeller<huaraz_at_moeller.plus.com> wrote:
> What Kerberos library do you use ? Heimdal 1.0.1  ?
>
I looked at it yesterday (I saw your posts on the heimdal mailing
list) but that's version 1.2 [1], the one included in the current
debian distro.

Would you have any clue to what the problem may be ? Should I try with
the MIT libs instead ?

Thanks for your help !

Jeremy
[1] http://packages.debian.org/search?keywords=heimdal&searchon=names&suite=stable&section=all

> "Jeremy Monnet" <jmonnet_at_gmail.com> wrote in message
> news:2b1bd02c0908260903w19691f69v83c2af6b1b140688_at_mail.gmail.com...
> On Wed, Aug 26, 2009 at 12:35 AM, Jeremy Monnet<jmonnet_at_gmail.com> wrote:
>>>
>>> This will create 200 authentication requests for testing.
>>
>> That will help me a lot ! Thank you very much for your answers !
>>
>> I'll post comments as soon as it works (or I get new questions).
>
> Ok, I am making progress (I guess). Though I am not really sure, I
> think I chose a different option when re-installing my AD controller.
> I think the AD should be made compatible with every version of
> windows, not only with windows 2000 and 2003. I should make more tests
> to be sure that was on of the problems.
>
> Now, I see the negotiate, and the ticket received seems far better (logs
> below).
>
> I believe the remaining error is "authenticateNegotiateHandleReply:
> helper: '0x9c8cd20' sent us 'NA gss_accept_sec_context() failed:  An
> unsupported mechanism was requested. unknown mech-code 0 for mech
> unknown'"
>
> If I play with squid_kerb_auth, I get
> squid_kerb_auth: gss_accept_sec_context() failed:  A token was
> invalid. unknown mech-code 0 for mech unknown
> NA gss_accept_sec_context() failed:  A token was invalid. unknown
> mech-code 0 for mech unknown
>
> If anyone has any idea about what that means ? I've read stuff about
> a file /etc/gss/mech, which doesn't exists on my linux box, and is
> trying to be read by squid_kerb_auth (I saw it using strace) ?
>
> Thanks,
>
> Regards,
>
> Jeremy
>
> ##########################################
> 2009/08/26 17:42:44.144| authenticateValidateUser: Validating
> Auth_user request '0'.
> 2009/08/26 17:42:44.145| authenticateValidateUser: Auth_user_request was
> NULL!
> 2009/08/26 17:42:44.146| authenticateAuthenticate: broken auth or no
> proxy_auth header. Requesting auth header.
> 2009/08/26 17:42:44.147| authenticateFixHeader: headertype:36 authuser:0
> 2009/08/26 17:42:44.147| AuthNegotiateConfig::fixHeader: Sending
> type:36 header: 'Negotiate'
> 2009/08/26 17:42:44.175| authenticateAuthenticate: header Negotiate
> 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.
> 2009/08/26 17:42:44.179| authenticateAuthenticate: This is a new
> checklist test on FD:23
> 2009/08/26 17:42:44.180| authenticateAuthenticate: no connection
> authentication type
> 2009/08/26 17:42:44.181| AuthConfig::CreateAuthUser: header =
> 'Negotiate
> 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'
> 2009/08/26 17:42:44.186| AuthUser::AuthUser: Initialised auth_user
> '0x9ed5470' with refcount '0'.
> 2009/08/26 17:42:44.187| AuthUserRequest::AuthUserRequest: initialised
> request 0x9ed91c8
> 2009/08/26 17:42:44.188| authenticateAuthUserLock auth_user '0x9ed5470'.
> 2009/08/26 17:42:44.189| authenticateAuthUserLock auth_user
> '0x9ed5470' now at '1'.
> 2009/08/26 17:42:44.189| AuthNegotiateConfig::decode: Negotiate
> authentication
> 2009/08/26 17:42:44.190| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.191| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.192| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.192| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.193| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.194| AuthNegotiateUserRequest::authenticate: auth
> state negotiate none. Received blob: 'Negotiate
> YIIEyQYGKwYBBQUCoIIEvTCCBLmgJDAiBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKwYBBAGCNwICCqKCBI8EggSLYIIEhwYJKoZIhvcSAQICAQBuggR2MIIEcqADAgEFoQMCAQ6iBwMFACAAAACjggOhYYIDnTCCA5mgAwIBBaENGwtBRC5TSU1JQS5GUqIpMCegAwIBAqEgMB4bBEhUVFAbFnNxdWlkcHJveHkuYWQuc2ltaWEuZnKjggNWMIIDUqADAgEXoQMCAQOiggNEBIIDQOIvxmTUEcVcJJncqXCQjLF1gpeTeV4Kte2NWFKreEjHFClFSaAe1s/68/g7wMHv+omNNahYsw8AK/+ctwjYMPINjyWO5tErHds5fj+cx5T5Xnm0go39xoJsJu+3ne2eGrZSWJkt7wiHeg0iZ2+2EOzxqJsXpP8qkNYnU/uaQtT9HlQaMA07pf4TrveFWNh/+2dXYdQV9ad99+//0YRBjg3MaINqLNiGK6iepBrzEFcdLeUqtQbpvsibAXh79N1aXtmQP+PFeOO5B4VeVVpXjoQpkQ5VcyQQyhPvB0ZKRToSiLISy2yHuu/iOMnMAHmJDRYPN63Dd6QgRkv0Ol7sfI9c6h29hU7nWteIZRv/gZ6ySlAJraGcgRfAxamh+EhYpLmms4Df1bG/YZ9r94mlfGKi/vp/hhVNA+SYyfKhpGGQv7JMKTwQHrrXrnKcIQ66DuOrLozZzX8VLofczFIJToX0QZBJwaxlR13bYZJvjQ948qwnYriekV7WusBXGUOJCBh3llWa3nMf8Od26Tyn033OTk9azobufAECDJIk+Jkle/hS+3bk7ojaTs05hkeQiY/1fegJ1foOA1xdGZm4c+pvMUpr3bKIX70eucdmeKS8qj9XE9x7KdgcRYDylfqBr7poHvmwNLhxmyhQIH9omFoCHvNuJLwBBX+lZncEQXHjRpyMIzA1QA8idRQWDoFXJwuISRkA/DkLmRfTMOrtIpw1B3VeLtzasRiHeo8aU4P54F4W3SrZMXZiTmeTmkmsf0tPm4QgAEJXTem7lcCICzBrjCCoQGI9bdGhwhRd2iBTe/yGbt6mQrffDx8tsmneJfdu0nw4553b2DmeCD/q3DDJ4lcL9XmthyY8pIjIX/p2uVbLNA5X+Ogdn/4G/vpFAT44icIz9Djx95O3bwwYId4Y6SmVkV5BqyPapw5q3IOogsv00LeK0FhLNdh30NIbxOSLAI4auNlFTwQs+ORQJ/sHvle0EmS5szuwL4jxMno7855Ujbma5Y0E64ef00YnThzGBuj1nDDoN9NmO4FFtPUoDFIdpaCIrVg5qqw6CjM/paOWY4oYPdGd9Gdz6b3zqu/IFvbITLzMU61Co2UcrGmkgbcwgbSgAwIBF6KBrASBqaYQ+2qnoLP4/3pVQNFps8vV9l5qzj/vfs5+7kEOPZa4TV/KkFj1srNkmyZtlsHxcTgUhH/ZI0iw/ISQmkghSxnmPSEoPce874Ijd7XmnHIwsrOysAI6rtfD31itlxasHrqCx7oCnhlrQ4mEfB2thEJy+Apyuhlo2i/uttu2IZqoUN5U58S0m0KpBk3h9+sWGetYgoI6o22o2haaur5Z/SoSd/rpq6BCYII='
> 2009/08/26 17:42:44.198| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 0->1
> 2009/08/26 17:42:44.199| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.199| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.200| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.201| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 1->2
> 2009/08/26 17:42:44.202| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.203| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.204| authenticateStart: auth_user_request '0x9ed91c8'
> 2009/08/26 17:42:44.205| AuthNegotiateUserRequest::module_start: auth
> state is '1'
> 2009/08/26 17:42:44.206| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 2->3
> 2009/08/26 17:42:44.248| authenticateNegotiateHandleReply: helper:
> '0x9c8cd20' sent us 'TT oRUwE6ADCgEBoQwGCisGAQQBgjcCAgo='
> 2009/08/26 17:42:44.248| authenticateNegotiateHandleReply: Need to
> challenge the client with a server blob
> 'oRUwE6ADCgEBoQwGCisGAQQBgjcCAgo='
> 2009/08/26 17:42:44.248| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.249| authenticateAuthenticate: header Negotiate
> YIIEyQYGKwYBBQUCoIIEvTCCBLmgJDAiBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKwYBBAGCNwICCqKCBI8EggSLYIIEhwYJKoZIhvcSAQICAQBuggR2MIIEcqADAgEFoQMCAQ6iBwMFACAAAACjggOhYYIDnTCCA5mgAwIBBaENGwtBRC5TSU1JQS5GUqIpMCegAwIBAqEgMB4bBEhUVFAbFnNxdWlkcHJveHkuYWQuc2ltaWEuZnKjggNWMIIDUqADAgEXoQMCAQOiggNEBIIDQOIvxmTUEcVcJJncqXCQjLF1gpeTeV4Kte2NWFKreEjHFClFSaAe1s/68/g7wMHv+omNNahYsw8AK/+ctwjYMPINjyWO5tErHds5fj+cx5T5Xnm0go39xoJsJu+3ne2eGrZSWJkt7wiHeg0iZ2+2EOzxqJsXpP8qkNYnU/uaQtT9HlQaMA07pf4TrveFWNh/+2dXYdQV9ad99+//0YRBjg3MaINqLNiGK6iepBrzEFcdLeUqtQbpvsibAXh79N1aXtmQP+PFeOO5B4VeVVpXjoQpkQ5VcyQQyhPvB0ZKRToSiLISy2yHuu/iOMnMAHmJDRYPN63Dd6QgRkv0Ol7sfI9c6h29hU7nWteIZRv/gZ6ySlAJraGcgRfAxamh+EhYpLmms4Df1bG/YZ9r94mlfGKi/vp/hhVNA+SYyfKhpGGQv7JMKTwQHrrXrnKcIQ66DuOrLozZzX8VLofczFIJToX0QZBJwaxlR13bYZJvjQ948qwnYriekV7WusBXGUOJCBh3llWa3nMf8Od26Tyn033OTk9azobufAECDJIk+Jkle/hS+3bk7ojaTs05hkeQiY/1fegJ1foOA1xdGZm4c+pvMUpr3bKIX70eucdmeKS8qj9XE9x7KdgcRYDylfqBr7poHvmwNLhxmyhQIH9omFoCHvNuJLwBBX+lZncEQXHjRpyMIzA1QA8idRQWDoFXJwuISRkA/DkLmRfTMOrtIpw1B3VeLtzasRiHeo8aU4P54F4W3SrZMXZiTmeTmkmsf0tPm4QgAEJXTem7lcCICzBrjCCoQGI9bdGhwhRd2iBTe/yGbt6mQrffDx8tsmneJfdu0nw4553b2DmeCD/q3DDJ4lcL9XmthyY8pIjIX/p2uVbLNA5X+Ogdn/4G/vpFAT44icIz9Djx95O3bwwYId4Y6SmVkV5BqyPapw5q3IOogsv00LeK0FhLNdh30NIbxOSLAI4auNlFTwQs+ORQJ/sHvle0EmS5szuwL4jxMno7855Ujbma5Y0E64ef00YnThzGBuj1nDDoN9NmO4FFtPUoDFIdpaCIrVg5qqw6CjM/paOWY4oYPdGd9Gdz6b3zqu/IFvbITLzMU61Co2UcrGmkgbcwgbSgAwIBF6KBrASBqaYQ+2qnoLP4/3pVQNFps8vV9l5qzj/vfs5+7kEOPZa4TV/KkFj1srNkmyZtlsHxcTgUhH/ZI0iw/ISQmkghSxnmPSEoPce874Ijd7XmnHIwsrOysAI6rtfD31itlxasHrqCx7oCnhlrQ4mEfB2thEJy+Apyuhlo2i/uttu2IZqoUN5U58S0m0KpBk3h9+sWGetYgoI6o22o2haaur5Z/SoSd/rpq6BCYII=.
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.249| AuthNegotiateUserRequest::authenticate: need
> to challenge client 'oRUwE6ADCgEBoQwGCisGAQQBgjcCAgo='!
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.249| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.249| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 3->4
> 2009/08/26 17:42:44.249| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 4->3
> 2009/08/26 17:42:44.249| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 3->4
> 2009/08/26 17:42:44.250| authenticateFixHeader: headertype:36
> authuser:0x9ed91c8
> 2009/08/26 17:42:44.250| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.250| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.250| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.250| AuthNegotiateConfig::fixHeader: Sending
> type:36 header: 'Negotiate oRUwE6ADCgEBoQwGCisGAQQBgjcCAgo='
> 2009/08/26 17:42:44.250| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 4->3
> 2009/08/26 17:42:44.250| authenticateFixHeader: headertype:36
> authuser:0x9ed91c8
> 2009/08/26 17:42:44.250| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 3->2
> 2009/08/26 17:42:44.251| authenticateNegotiateHandleReply: telling
> stateful helper : 1
> 2009/08/26 17:42:44.252| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 2->1
> 2009/08/26 17:42:44.275| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.275| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.275| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.275| authenticateAuthenticate: header Negotiate
> oS4wLKIqBChOVExNU1NQAAEAAAAHggiiAAAAAAAAAAAAAAAAAAAAAAUBKAoAAAAP.
> 2009/08/26 17:42:44.275| authenticateAuthenticate: This is a new
> checklist test on FD:23
> 2009/08/26 17:42:44.275| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.275| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.275| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.275| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.277| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.277| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.277| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 1->2
> 2009/08/26 17:42:44.277| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.277| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.277| authenticateStart: auth_user_request '0x9ed91c8'
> 2009/08/26 17:42:44.277| AuthNegotiateUserRequest::module_start: auth
> state is '2'
> 2009/08/26 17:42:44.277| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 2->3
> 2009/08/26 17:42:44.305| authenticateNegotiateHandleReply: helper:
> '0x9c8cd20' sent us 'NA gss_accept_sec_context() failed:  An
> unsupported mechanism was requested. unknown mech-code 0 for mech
> unknown'
> 2009/08/26 17:42:44.305| authenticateNegotiateReleaseServer: releasing
> server '0x9c8cd20'
> 2009/08/26 17:42:44.305| authenticateNegotiateHandleReply: Failed
> validating user via Negotiate. Error returned
> 'gss_accept_sec_context()'
> 2009/08/26 17:42:44.305| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.305| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.305| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.305| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.305| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.305| authenticateAuthenticate: header Negotiate
> oS4wLKIqBChOVExNU1NQAAEAAAAHggiiAAAAAAAAAAAAAAAAAAAAAAUBKAoAAAAP.
> 2009/08/26 17:42:44.305| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.305| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.306| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.306| AuthNegotiateUserRequest::authenticate: need
> to challenge client 'gss_accept_sec_context()'!
> 2009/08/26 17:42:44.306| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.306| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.306| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.306| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 3->2
> 2009/08/26 17:42:44.306| AuthUserRequest::lock: auth_user request
> '0x9ed91c8 2->3
> 2009/08/26 17:42:44.306| authenticateFixHeader: headertype:36
> authuser:0x9ed91c8
> 2009/08/26 17:42:44.306| authenticateValidateUser: Validating
> Auth_user request '0x9ed91c8'.
> 2009/08/26 17:42:44.306| authenticateValidateUser: Validated Auth_user
> request '0x9ed91c8'.
> 2009/08/26 17:42:44.306| AuthNegotiateUserRequest::authenticated: user
> not fully authenticated.
> 2009/08/26 17:42:44.306| AuthNegotiateConfig::fixHeader: Sending
> type:36 header: 'Negotiate'
> 2009/08/26 17:42:44.306| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 3->2
> 2009/08/26 17:42:44.306| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 2->1
> 2009/08/26 17:42:44.306| authenticateNegotiateHandleReply: telling
> stateful helper : 2
> 2009/08/26 17:42:44.307| AuthUserRequest::unlock: auth_user request
> '0x9ed91c8 1->0
> 2009/08/26 17:42:44.307| AuthUserRequest::unlock: deleting
> auth_user_request '0x9ed91c8'.
> 2009/08/26 17:42:44.307| AuthUserRequest::~AuthUserRequest: freeing
> request 0x9ed91c8
> ##########################################
>
>
>
Received on Thu Aug 27 2009 - 06:47:12 MDT