Bug 41555 - UCClient: Proxy Kerberos authentication does not work
UCClient: Proxy Kerberos authentication does not work
Status: CLOSED INVALID
Product: UCS@school
Classification: Unclassified
Component: Proxy services
UCS@school 4.1 R2
Other Linux
: P5 normal (vote)
: UCS@school 4.1 R2
Assigned To: Janek Walkenhorst
Sönke Schwardt-Krummrich
:
: 41766 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-06-14 11:07 CEST by Janek Walkenhorst
Modified: 2016-07-11 16:59 CEST (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Janek Walkenhorst univentionstaff 2016-06-14 11:07:19 CEST
After configuring the proxy.pac in Firefox, Firefox asks for username/password for the proxy instead of using the Kerberos ticket.

The ticket exists and can be used for ssh. So it seems a configuration or Firefox issue.
Comment 1 Janek Walkenhorst univentionstaff 2016-06-14 12:21:06 CEST
Problem was that
 univention-ucc-ucsschool-integration
was not installed on the client and that
 squid/krb5auth=yes
was not set on the proxy.

With those two changes it works.
Comment 2 Janek Walkenhorst univentionstaff 2016-06-14 12:26:49 CEST
(In reply to Janek Walkenhorst from comment #1)
> […] that
>  squid/krb5auth=yes
> was not set on the proxy.

This is intentional.
Comment 3 Sönke Schwardt-Krummrich univentionstaff 2016-06-15 15:49:11 CEST
(In reply to Janek Walkenhorst from comment #2)
> This is intentional.

Correct
Comment 4 Florian Best univentionstaff 2016-06-28 18:24:59 CEST
UCS@school 4.1 R2 has been released:
http://docs.software-univention.de/release-notes-ucsschool-4.1R2v1-de.pdf

If this error occurs again, please use "Clone This Bug".
Comment 5 Daniel Tröder univentionstaff 2016-07-11 16:59:29 CEST
*** Bug 41766 has been marked as a duplicate of this bug. ***