Squid - kerberos and the cache log
I recently setup a Debian 6.0.6 box with Squid 3.1 installed from the repository. I'm moving my proxies over to Kerberos before I raise AD from 2003 to 2008. I've gotten everything working correctly, but I keep getting an odd entry in the cache log.
Code:
2012/12/06 10:17:40| squid_kerb_auth: DEBUG: AF long randmon string of text== User@DOMAIN.COM
This pops up quite frequently. The thing is the proxy is working just as it should. All the traffic is being logged according to username in the access log and my staff can get to everywhere they're trying to go. Kerberos is the only configured authentication method in the Squid config file.
In my Google travels I read some references to clients attempting to send NTLM back Squid first, but this was usually accompanied by this in the cache log; which isn't present in mine.
Code:
WARNING: received type 1 NTLM token
Is this even indicative of an error, or do I simply need to turn down a debug level or something? Thanks!