Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

KERBEROS+SQUID+ID

Linux Kernel, Network, and Services configuration.
Post Reply
Message
Author
Vitcox
Posts: 1
Joined: 2016-01-07 08:59

KERBEROS+SQUID+ID

#1 Post by Vitcox »

Hi All,

Fisrtly I`d like to say hello to everyone as its my first post here. I`m quite familiar with the unix based system but not yet an expert :)

My current project is to set up transparent PROXY SQUID3 + content filtering DANSGUARDIAN and integrate it on our cororate windows domain.
I did installed


When I try to KINIT I get error message:

Code: Select all

root@WebFilter:/home/itdept# kinit Administrator@IMPORTSERVICES.LOCAL
kinit: Cannot contact any KDC for realm 'IMPORTSERVICES.LOCAL' while getting initial credentials
CONFIGURATION:
Domain Name

Code: Select all

 IMPORTSERVICES.LOCAL 
AD + DNS1

Code: Select all

 ISLDC1 192.168.10.107  
DNS2

Code: Select all

 ISLDC02 192.168.10.108 
hostname -f

Code: Select all

 WebFilter 
/etc/krb.conf

Code: Select all

[libdefaults]
        default_realm = IMPORTSERVICES.LOCAL

# The following krb5.conf variables are only for MIT Kerberos.
        krb4_config = /etc/krb.conf
        krb4_realms = /etc/krb.realms
        kdc_timesync = 1
        ccache_type = 4
        forwardable = true
        proxiable = true

# The following libdefaults parameters are only for Heimdal Kerberos.
        v4_instance_resolve = false
        v4_name_convert = {
                host = {
                        rcmd = host
                        ftp = ftp
                }
                plain = {
                        something = something-else
                }
        }
        fcc-mit-ticketflags = true

[realms]
        IMPORTSERVICES.LOCAL = {
                kdc = isldc01.importservices.local
                kdc = isldc02.importservices.local
                admin_server = isldc01.importservices.local
                default_domain = importservices.local
        }

[domain_realm]
        .importservices.local = IMPORTSERVICES.LOCAL
        importservices.local = IMPORTSERVICES.LOCAL


[login]
        krb4_convert = true
        krb4_get_tickets = false
/etc/network/interfaces

Code: Select all

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

#ethernet configuration
allow-hotplug eth0
auto eth0
iface eth0 inet static
address 192.168.10.150
netmask 255.255.255.0
gateway 192.168.10.1
dns-nameservers 192.168.10.107
dns-search importservices.local

WHAT I`VE DONE WRONG HERE :) It must be some super silly mistake :twisted: :mrgreen:

THanks for any kind of help!

Post Reply