Comment 1 Arvid Requate 2013-07-15 11:09:20 CEST

Development of univention-squid-kerberos was aborted at some point, amongst other things due to Bug 27401.

Comment 2 Felix Botner 2013-07-18 14:50:10 CEST

By now our auth helper squid_ldap_ntlm_auth is also a negotiate wrapper (with kerberos (squid_kerb_auth) and ntlm as backends). I think there is no reason not "kerberosify" the univention-squid in a non-Samba4 environment.

-> univention-install univention-squid
-> eval "$(ucr shell)"
-> udm kerberos/kdcentry create "$@" \
    --ignore_exists \
    --position "cn=kerberos,$ldap_base" \
    --set name="HTTP/$hostname.$domainname" \
    --set generateRandomPassword=1
-> kadmin -l ext \
    --keytab=/var/lib/samba/private/http-proxy-$hostname.keytab \
    'HTTP/$hostname.$domainname@$keberos_realm'
-> chown proxy /var/lib/samba/private/http-proxy-master.keytab
-> ucr set squid/krb5auth='yes'
-> /etc/init.d/squid3 restart

Comment 3 Felix Botner 2013-08-05 15:18:13 CEST

*** Bug 27980 has been marked as a duplicate of this bug. ***

Comment 4 Arvid Requate 2013-08-20 18:49:24 CEST

The keytab should also rather be placed in /etc/squid3 or /var/spool/squid3/ than in a samba specific directory. The univention-squid template for /etc/default/squid3 needs to be adjusted accordingly as well.

Comment 5 Stefan Gohmann 2017-06-16 20:39:16 CEST

This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4.

If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.

Comment 6 Stefan Gohmann 2017-08-08 07:09:16 CEST

This issue has been filed against UCS 3.1.

UCS 3.1 is out of maintenance and many UCS components have vastly changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen this issue. In this case please provide detailed information on how this issue is affecting you.