AW: [squid-users] No Kerberos Auth

2012-10-31 Thread Jarosch, Ralph
I've found this today. why is the last ticket not renewed ?? Could that point the problem [root@http-proxy ~]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: HTTP/http-proxy.justiz.niedersachsen...@justiz.niedersachsen.de Valid starting ExpiresService principal

Re: [squid-users] feature request: setting location of coordinator.ipc and kidx.ipc during runtime?

2012-10-31 Thread Rietzler, Markus (RZF, SG 324 / RIETZLER_SOFTWARE)
-Ursprüngliche Nachricht- Von: Amos Jeffries [mailto:squ...@treenet.co.nz] Gesendet: Mittwoch, 24. Oktober 2012 01:08 An: squid-users@squid-cache.org Betreff: Re: [squid-users] feature request: setting location of coordinator.ipc and kidx.ipc during runtime? On 24.10.2012 03:38,

[squid-users] add DENIED tag by redirector for easy identification in logfile

2012-10-31 Thread Amm
Hi I wanted to know if url_rewrite_program can add a TAG for logging. I have a redirector which blocks certain sites. But in squid logs there is no way to indicate if redirector blocked it. As per this, there is already a tag called DENIED when request is rejected by acl.

Re: [squid-users] add DENIED tag by redirector for easy identification in logfile

2012-10-31 Thread Amos Jeffries
On 1/11/2012 12:07 a.m., Amm wrote: Hi I wanted to know if url_rewrite_program can add a TAG for logging. Not for tags output by the helper program itself. I am currently working on a project to clean up and combining the Squid helper interfaces such that for example; url_rewrite_program

Re: [squid-users] add DENIED tag by redirector for easy identification in logfile

2012-10-31 Thread Amm
- Original Message - From: Amos Jeffries squ...@treenet.co.nz   If you are interested in sponsoring any code development towards that please contact me off-list about payment details. Hi Amos, First of all thanks for replying immediately. But sorry to say that its a very small

[squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Heinrich Hirtzel
Hello For a school project I'm trying to intercept SSL connections by using Squid (client - squid (transparent) - server). I'm running Squid 3.1.20 on Ubuntu server 12.10 (64 bit) using the following configuration: * http_port 10.0.1.1.:3128 intercept

Re: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Eliezer Croitoru
On 10/31/2012 5:33 PM, Heinrich Hirtzel wrote: Hello For a school project I'm trying to intercept SSL connections by using Squid (client - squid (transparent) - server). I'm running Squid 3.1.20 on Ubuntu server 12.10 (64 bit) using the following configuration:

[squid-users] intermittent TCP_MISS on file specified in refresh_pattern

2012-10-31 Thread Mike Pentecost
We are running Squid 3.1 on Debian Squeeze. We are using squid as a reverse proxy/cache for a Django backend. The cache is working well, but there is one file that keeps getting by. It has a ? in its URL, which is needed because it has a license key parameter in it. I put a refresh pattern to

RE: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Heinrich Hirtzel
Hi Eliezer   what iptables rules have you used? also you better use squid 3.2 for ssl-bump. iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 81 -j REDIRECT --to-port 3128 iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 443 -j REDIRECT --to-port 443   also you better use squid 3.2

RE: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Heinrich Hirtzel
I've just updated to the most recent squid version (compiled with --enable-ssl *and* --enable-ssl-crtd): ./squid -v Squid Cache: Version 3.2.3-20121031-r11695 I can start squid without any errors, but when I try to connect to the daemon the connection gets terminated immediately (using

Re:: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Amm
-- On Wed 31 Oct, 2012 9:03 PM IST Heinrich Hirtzel wrote: http_port 10.0.1.1.:3128 intercept https_port 10.0.1.1.:443 ssl-bump cert=/user/local/squid3/ssl_cert/myCA.pm you have forgotten intercept on https line Amm

[squid-users] RE: : [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Heinrich Hirtzel
you have forgotten intercept on https line Amm Already tired that before, doesn't work either. Date: Thu, 1 Nov 2012 00:59:15 +0800 From: ammdispose-sq...@yahoo.com To: heinrichhirtze...@hotmail.com; squid-users@squid-cache.org Subject: Re::

[squid-users] Re: No Kerberos Auth

2012-10-31 Thread Markus Moeller
Hi Ralph, If you use NTLM and Kerberos make sure you do NOT use the sam AD account for both. The samba daemon will change the password on a regular basis which will bring the keytab out of sync with the AD acccount. Your proxy will not need any kerberos cache (except if you use my

[squid-users] Reverse Proxy for Virtual Hosts

2012-10-31 Thread Karl Hill
Hello, I'm having some issues setting up a reverse proxy in my environment for some URL's running on the same Apache server. I'm using squid 3.1.10. My configuration is below, but basically I have two sites on one Apache server and that server is in an isolated environment. The Apache sites are

Re: [squid-users] Reverse Proxy for Virtual Hosts

2012-10-31 Thread Amos Jeffries
On 01.11.2012 10:48, Karl Hill wrote: Hello, I'm having some issues setting up a reverse proxy in my environment for some URL's running on the same Apache server. I'm using squid 3.1.10. My configuration is below, but basically I have two sites on one Apache server and that server is in an

Re: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Amos Jeffries
On 01.11.2012 04:33, Heinrich Hirtzel wrote: Hello For a school project I'm trying to intercept SSL connections by using Squid (client - squid (transparent) - server). I'm running Squid 3.1.20 on Ubuntu server 12.10 (64 bit) using the following configuration:

Re: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Eliezer Croitoru
On 10/31/2012 6:43 PM, Heinrich Hirtzel wrote: I've just updated to the most recent squid version (compiled with --enable-ssl *and* --enable-ssl-crtd): ./squid -v Squid Cache: Version 3.2.3-20121031-r11695 what are all the compilation options from -v (curios) try the latest stable at: http

RE: [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Amos Jeffries
On 01.11.2012 04:49, Heinrich Hirtzel wrote: Hi Eliezer   what iptables rules have you used? also you better use squid 3.2 for ssl-bump. iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 81 -j REDIRECT --to-port 3128 iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 443 -j REDIRECT

Re: [squid-users] RE: : [squid-users] Squid and SSL interception (ssl-bump)

2012-10-31 Thread Amos Jeffries
Date: Thu, 1 Nov 2012 00:59:15 +0800 From: ammdispose-squid -- On Wed 31 Oct, 2012 9:03 PM IST Heinrich Hirtzel wrote: http_port 10.0.1.1.:3128 intercept https_port 10.0.1.1.:443 ssl-bump

Re: [squid-users] intermittent TCP_MISS on file specified in refresh_pattern

2012-10-31 Thread Amos Jeffries
On 01.11.2012 04:46, Mike Pentecost wrote: We are running Squid 3.1 on Debian Squeeze. We are using squid as a reverse proxy/cache for a Django backend. The cache is working well, but there is one file that keeps getting by. It has a ? in its URL, which is needed because it has a license