AW: [squid-users] NTLM/Kerberos Authentication with Windows 7

2011-03-03 Thread Henickl Wolfgang
Thanks for the reply! The major problem is, that the changes in Security Policy of Windows 7 hasn't changed a thing. But I will try it again, therefore my question. I am also unsure, because in Windows 7 a new WinHTTP Version is included, which may also cause problems. Is there anything,

Re: [squid-users] Re: squid_kerb_ldap - Squid and AD integration

2011-03-03 Thread Essad Korkic
Hi Markus, Thanks for the reply.. I don't know why it's not able to authenticate against some servers, if I run it a few times, it authenticates often with a different server, so it's not just one. I really don't want to run a caching DNS server, mainly because the resolving that goes well is

[squid-users] Re: squid_kerb_ldap - Squid and AD integration

2011-03-03 Thread jrojas
Hi Folks. Some hours ago I was wondering if there is there an option to specify a ldap server using ./squid_kerb_ldap helper ??? In my enviroment I have 7 sites and more than 16 ldap servers. For one site located in PERU, I've already set it up, I mean, Integration squid w/ Active Directory. but

[squid-users] Re: squid_kerb_ldap - Squid and AD integration

2011-03-03 Thread jrojas
Hi Essad. Do you have any idea to solve it?. I mean... is there any work around? Thanks. Jhonatan Rojas. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-kerb-ldap-Squid-and-AD-integration-tp3331799p3332988.html Sent from the Squid - Users mailing list

Re: [squid-users] Re: squid_kerb_ldap - Squid and AD integration

2011-03-03 Thread Essad Korkic
Hi Jhonatan, I've just come across this bugreport: http://bugs.squid-cache.org/show_bug.cgi?id=3075 Here it states that there is an option in the newest squid_kerb_ldap so you can provide a list of ldap servers to check. (-S) I've just downloaded the sourcefiles and I'm trying to get them

Re: [squid-users] im planning to compose a nice video tutorial on squid stable versions

2011-03-03 Thread Eliezer
well it suppose to be a basic guide for dummies how to install.. how to configure. some live samples and site analysis. and also this RFC to find what users will want to know or see. On 03/03/2011 06:50, Amos Jeffries wrote: On 03/02/11 15:58, Eliezer wrote: im planning to compose a

[squid-users] squidclamav and ssl pages?

2011-03-03 Thread marco
Howdi folks, is it possible with squid 2.7 and squidclamav to scan the https contents for Virus ? saw on the squid page, that squid only tunneling the bytes, but cant parse the contents :/ thanks

Re: [squid-users] squidclamav and ssl pages?

2011-03-03 Thread Amos Jeffries
On 03/03/11 23:29, marco wrote: Howdi folks, is it possible with squid 2.7 and squidclamav to scan the https contents for Virus ? No. saw on the squid page, that squid only tunneling the bytes, but cant parse the contents :/ Correct. Amos -- Please be using Current Stable Squid

[squid-users] squid issues with Ninja Saga PVP

2011-03-03 Thread jiluspo
Does anybody have issues with ninja saga connection in PVP. Clients cant join/connect PVP in ninja saga(flash based facebook games) other than PVP ninja saga works fine. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

Re: [squid-users] debugging ERR_INVALID_REQ condition

2011-03-03 Thread Leonardo Rodrigues
Em 02/03/11 18:41, Amos Jeffries escreveu: In the Log I spy 411 Length Required being the status. For a POST with no content-length header this is invalid according to HTTP/1.0 and extremely dangerous to permit. HTTP/1.1 chunking makes this okay, I see the client has attempted to do that.

Re: [squid-users] refresh_pattern based on acl

2011-03-03 Thread Leon Volfson
Hi Amos, thanks for answering. NP: The safe way to save on traffic while obeying the standard is reload-into-ims. Which converts a full force-reload into an efficient revalidation. this is not done to save on traffic, but to not kill the web server with all the requests. To make it

[squid-users] Squid 3.1.11 compilation problem on OpenBSD 4.9

2011-03-03 Thread Silamael
I together, When compiling Squid 3.1.11 on the current OpenBSD, i get an error because netinet/in.h is not included in include/util.h before including arpa/inet.h. Attached is a simple patch fixing this issue. -- Matthias --- include/util.h.orig Thu Mar 3 14:04:15 2011 +++ include/util.h

RE: [squid-users] Auth popup not shown on website

2011-03-03 Thread Xavier Magnaudeix
Thanks all for your help, I know a lot more now about this issue. -Message d'origine- De : Amos Jeffries [mailto:squ...@treenet.co.nz] Envoyé : jeudi 3 mars 2011 01:44 À : squid-users@squid-cache.org Objet : RE: [squid-users] Auth popup not shown on website On Wed, 2 Mar 2011 17:34:52

Re: [squid-users] refresh_pattern based on acl

2011-03-03 Thread Amos Jeffries
On 04/03/11 02:10, Leon Volfson wrote: Hi Amos, thanks for answering. NP: The safe way to save on traffic while obeying the standard is reload-into-ims. Which converts a full force-reload into an efficient revalidation. this is not done to save on traffic, but to not kill the web server

Re: [squid-users] Tunneling https (with proxy chaining)

2011-03-03 Thread Leonardo
On Wed, Mar 2, 2011 at 11:02 PM, Amos Jeffries squ...@treenet.co.nz wrote: On Wed, 2 Mar 2011 17:50:20 +0100, Leonardo wrote: Hi all, I have successfully set up a bridge on my Debian 5.0.5 with Squid 3.1.7 to tunnel http traffic. ? these two concepts do not overlap. Do you have a bridge

[squid-users] 407 Error - How to see the login used ?

2011-03-03 Thread Bob Sauvage
Hi *, I have a problem with a java client. It tries to connect to my Squid proxy server with NTLM authentication but a 407 error occurs. How to see in the squid log the login/(password?)/domain used by the java client ? I tried with TCPDUMP but credentials are not displayed. Thanks in

[squid-users] Re: Client timing out when using squid as tproxy

2011-03-03 Thread mbruell
Amos Jeffries-2 wrote: On Wed, 2 Mar 2011 14:29:01 -0800 (PST), mbruell wrote: Firewall policy grabs traffic from the client based on IP address, and forces it to our proxy through the wccp tunnel. based on IP address is very bad. Working TPROXY traffic coming out of squid will

Re: [squid-users] 407 Error - How to see the login used ?

2011-03-03 Thread Amos Jeffries
On 04/03/11 03:52, Bob Sauvage wrote: Hi *, I have a problem with a java client. It tries to connect to my Squid proxy server with NTLM authentication but a 407 error occurs. How to see in the squid log the login/(password?)/domain used by the java client ? I tried with TCPDUMP but credentials

Re: [squid-users] Re: Client timing out when using squid as tproxy

2011-03-03 Thread Amos Jeffries
On 04/03/11 04:58, mbruell wrote: Amos Jeffries-2 wrote: On Wed, 2 Mar 2011 14:29:01 -0800 (PST), mbruell wrote: Firewall policy grabs traffic from the client based on IP address, and forces it to our proxy through the wccp tunnel. based on IP address is very bad. Working TPROXY traffic

Re: [squid-users] Re: squid_kerb_ldap - Squid and AD integration

2011-03-03 Thread Essad Korkic
Gent's I've compiled the latest version from CVS as indicated by Markus and I can confirm that it works. The -S option works as indicated, I now can specify a list of ldap servers to bind to. I also updated the bugtracker on http://bugs.squid-cache.org/show_bug.cgi?id=3075. Thanks again for

[squid-users] Re: Client timing out when using squid as tproxy

2011-03-03 Thread mbruell
Amos Jeffries-2 wrote: On 04/03/11 04:58, mbruell wrote: Should we be seeing traffic on the lo interface when it's all working correctly? The packet count on lo is very low, and doesn't change when trying to proxy the traffic. Okay, try adding the special route table to eth0 as well.

[squid-users] Squid slows under load

2011-03-03 Thread Julian Pilfold-Bagwell
Hi All, I've been having some problems with Squid and Dansguardian for a while now and despite lots of time on Google, haven't found a solution. The problem started a week or so back when I noticed that squid was slowing. A quick look through the logs showed it was running out of file

Re: [squid-users] Squid slows under load

2011-03-03 Thread Pieter De Wit
Hi Julian, The one stat that I can't see here is disk access. I know you said that you have SSD's, but what is the disk stats for your logging volume and the squid volume ? If you totally bypass the proxy, does it improve ? (could be that the squid server is getting shaped ?) Cheers,

[squid-users] Re: squid_kerb_ldap - Squid and AD integration

2011-03-03 Thread Markus Moeller
Hi Jhonatan, jrojas jro...@gilatla.com wrote in message news:1299143846741-3332984.p...@n4.nabble.com... Hi Folks. Some hours ago I was wondering if there is there an option to specify a ldap server using ./squid_kerb_ldap helper ??? In my enviroment I have 7 sites and more than 16 ldap

Re: [squid-users] Re: Client timing out when using squid as tproxy

2011-03-03 Thread Amos Jeffries
On 04/03/11 06:21, mbruell wrote: Amos Jeffries-2 wrote: On 04/03/11 04:58, mbruell wrote: Should we be seeing traffic on the lo interface when it's all working correctly? The packet count on lo is very low, and doesn't change when trying to proxy the traffic. Okay, try adding the