Another Kerberos error in Cache.log on Squid server

During my configuration of an Squid Proxy Server on Ubuntu in conjunction with Kerberos and Active Directory I encountered another error in the cache.log of the Squid Server:

ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message: gss_accept_sec_context() failed: An unsupported mechanism was requested. Unknown error; }}

The reason for this error was the loopback address (127.0.0.1) for the current host in the hosts file in /etc/hosts. The entry in the hosts file was like this:

127.0.0.1 squid.contoso.com

I changed the entry to the real IP address of the Ubuntu Server:

192.168.1.250 squid.contoso.com

After the chang I restarted the Server and the error was gone.

Leave a Reply

Your email address will not be published. Required fields are marked *