View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0005790Kali LinuxKali Package Bugpublic2019-11-13 08:282025-07-14 09:36
ReporterRoseDeSable Assigned Torhertzog  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Product Versionkali-dev 
Summary0005790: squid: can't get a kerberos service ticket for the proxy since the last daily update of kali
Description

Good Morning,
I'm using a local squid on my Kali. Since two years squid authenticates itself on my proxy by kerberos. Here is the defintion in squid.conf:

/usr/lib/squid3/negotiate_kerberos_auth -d -s HTTP/<my proxy>@<my realm>

But yesterday after my daily update the service name in the kerberos packet is "localhost". Here I must find "<my proxy>@<my realm>".

Here is the part of the packet trace

    req-body
        Padding: 0
        kdc-options: 00800000 (renewable)
        realm: <my realm>
        sname
            name-type: kRB5-NT-SRV-HST (3)
            sname-string: 2 items
                SNameString: HTTP
                SNameString: localhost
        till: 2019-11-13 16:42:42 (UTC)
        nonce: 1875300571
        etype: 4 items

So my squid can't receive a service ticket for the proxy, so that I can't go outside.

Best Regards
Rose

Activities

RoseDeSable

RoseDeSable

2019-11-15 10:34

reporter   ~0011306

Hello,
I'm updating my system daily. First after the update of this morning, the problem is solved. Please close the ticket.

Bye
Rose
rhertzog

rhertzog

2019-11-15 14:50

administrator   ~0011308

Thanks, closing.

Issue History

Date Modified Username Field Change
2019-11-13 08:28 RoseDeSable New Issue
2019-11-15 10:34 RoseDeSable Note Added: 0011306
2019-11-15 14:50 rhertzog Assigned To => rhertzog
2019-11-15 14:50 rhertzog Status new => closed
2019-11-15 14:50 rhertzog Resolution open => fixed
2019-11-15 14:50 rhertzog Note Added: 0011308
2025-07-14 09:36 g0tmi1k Priority high => normal