Kevin Davies
Kevin Davies
Figured it out, I need tls=none. Otherwise it tries to register for a cert on start and fails if it cannot. This is NOT shown in the documentation anywhere and...
macOS supports Kerberos by default out of the box so you should not have to worry about it for that platform. Its happens automatically when the network layer reaches out...
If you read the macOS section it says Kerberos is handled at the network layer. Unless I am missing something. "In macOS, the Kerberos SSO extension proactively acquires a Kerberos...
So we need to turn on some Kerberos output so we can see the auth happening, I’m not sure how that is done.
> Note I am on a Mac running on Apple silicon, and I compiled the latest version of alpaca for my system from the latest commit. Also my Mac had...
Yeah it’s network layer auth, well before proxies at the application layer. This is what I expect to occur. Not sure @samuong is convinced though.
Updated comment below.
After you use the proxy run the following command and paste the **_sanitised_** result here. Also if you know the proxy address and name that would be useful so we...
Yep so that confirms Kerberos tickets exist for that host. Now if we can get that list via python @samuong can confirm which proxy shots he does not need auth...
If their is an existing proxy PAC it will always be internal to a company. If the company chooses to use http or https is really a security posture of...