https://sudonull.com/kerberos-squid-errors-bad-encryption-and-service-key
Analysis of GSS errors in Squid with Kerberos/AD: bad encryption type, service key not available, KVNO mismatch. Commands for keytab, krb5.conf, ICMP. Instructions for sysadmin.