Re: [squid-users] squid_kerb_auth Backup-Auth server?

Andrew Am Freitag, 2. Oktober 2009 22:26:19 schrieb andrew: Mrvka Andreas wrote: Hi list, does anybody know if there is any change to define a backup kerberos authentication server? Do I have to set anything in krb5.conf to support more than one AD server? If I want to reboot

[squid-users] squid_kerb_auth Backup-Auth server?

Hi list, does anybody know if there is any change to define a backup kerberos authentication server? Do I have to set anything in krb5.conf to support more than one AD server? If I want to reboot the kerberos server squid should still be able to authenticate. Are there any hints? Regards

Re: [squid-users] Re: Re: Re: Re: squid_kerb_auth.... Key Version number?

Sonntag, 27. September 2009 22:30:18 schrieb Markus Moeller: Andrew, I added more details to the wiki for cases where Samba is used too. I hope this helps. Regards Markus Mrvka Andreas m...@tuv.at wrote in message news:200909250845.48301@tuv.at... Agreed. So if I read

Re: [squid-users] Re: Re: Re: squid_kerb_auth.... Key Version number?

Moeller: Henrik Nordstrom hen...@henriknordstrom.net wrote in message news:1253822657.5592.1.ca...@localhost.localdomain... tor 2009-09-24 klockan 10:09 +0200 skrev Mrvka Andreas: You are right - I have to use NTLM too because there are many IE 6 around. But I use the same name

Re: [squid-users] Re: Re: squid_kerb_auth.... Key Version number?

Hi, Am Mittwoch, 23. September 2009 23:45:17 schrieb Markus Moeller: Mrvka Andreas m...@tuv.at wrote in message news:200909230856.14501@tuv.at... Well, What do you mean with clearing cache on Windows client? Do you mean the AD Server Win2k8 or a normal Windows browser cache

Re: [squid-users] Re: squid_kerb_auth.... Key Version number?

using the Windows klist or kerbtray from the resource kit ? Regards Markus Mrvka Andreas m...@tuv.at wrote in message news:200909221022.00697@tuv.at... Hi again, now I created the HTTP.keytab file on Win2k8 server and actually the apps klist -ke and kvno say the key versions are VALID

Re: [squid-users] squid_kerb_auth.... Key Version number?

with squid they differed.!? I only use one KDC Win2k8 (configured in krb5.conf). Does anybody has a clue? Thanks Andrew Am Dienstag, 22. September 2009 00:33:13 schrieb Mrvka Andreas: Hi list, does anybody know what to do againg different key version numbers using squid_kerb_auth? I

Re: [squid-users] squid_kerb_auth.... Key Version number?

. :-) Regards Andrew Am Dienstag, 22. September 2009 08:48:28 schrieb Mrvka Andreas: Hello, on the next day, I also get my Key Version number-problem on the same domain What is the best way to keep the versions in sync? I already erased the computer account and did msktutil again. I

[squid-users] squid_kerb_auth.... Key Version number?

Hi list, does anybody know what to do againg different key version numbers using squid_kerb_auth? I created HTTP.keytab from the msktutil and works great. In fact in this domain where squid lives this internet explorers has no problem using squid_kerb_auth. On other domains I get Unspecified

Re: [squid-users] Re: squid_kerb_auth and Windows 2008

Am Mittwoch, 2. September 2009 23:35:32 schrieb Markus Moeller: I found the problem. msktutil has a bug when using a computername with uppercase letters. I never mind using uppercase letters :-)) But I' ve tested it once with the computer name squid-HTTP and it worked as well. The short

Re: [squid-users] Re: Re: kerberos (AD) authentication - squid_kerb_auth

Hi, Am Donnerstag, 27. August 2009 08:40:53 schrieb Jeremy Monnet: Would you have any clue to what the problem may be ? Should I try with the MIT libs instead ? I use MIT libs... FYI Thanks for your help ! Jeremy Andrew

Re: [squid-users] Re: kerberos (AD) authentication - squid_kerb_auth

hi, if you have made the wiki[...]/Kerberos guide through then you are close to the goal. it seems that your problem is only configuration error on client side. since squid_kerb_auth is a MUST to configure the fqdn name of squid in the IE settings. at my place IE 7, IE 8 and FF 3.5 works

Re: [squid-users] Re: kerberos (AD) authentication - squid_kerb_auth

hm... i can tell you what I did. first I tried ktpass too as you describe. But nevertheless to use exactly the same as in the wiki I finally used msktutil to proceed. I run an SLES 11 Server and had to download SLES 11 SDK iso to compile msktutil successfully. My way was: - configure

Re: [squid-users] Re: Linux using kerberos works but squid won't

Hi Markus, yes I set it up as you described. Andrew Am Montag, 24. August 2009 21:53:49 schrieb Markus Moeller: Did you set the environment variable KRB5_KTNAME to your HTTP.keytab location otherwise the default /etc/krb5.keytab will be used ? Markus Mrvka Andreas m...@tuv.at wrote

Re: [squid-users] (solved) Linux using kerberos works but squid won't

Wiki. Andrew Am Montag, 24. August 2009 13:55:23 schrieb Mrvka Andreas: Hi list, I want to use this brilliant software squid but do you know what I missing? I have working AD authentication on my SLES11 system - kinit -k -t HTTP.keytab HTTP/squid.fqdn.com works - login via ssh works

[squid-users] Linux using kerberos works but squid won't

Hi list, I want to use this brilliant software squid but do you know what I missing? I have working AD authentication on my SLES11 system - kinit -k -t HTTP.keytab HTTP/squid.fqdn.com works - login via ssh works with pam_krb5 - joining to my domain also worked as a charm At this stage I

Re: [squid-users] disable ntlm_auth for java

hi, nice to see someone who has the same error with the same site :-) just add the following 2 lines for every site you don't want to authenticate. (windowsupdate.com for example) acl netbanking

Re: [squid-users] problem with 2 proxies in same network

Hi Mark, hi list. Am Montag, den 16.01.2006, 22:59 +0100 schrieb Mark Elsen: You may need : http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE12-SMB_BadFetch M. this workaround compiling squid again without --enable-ntlm-fail didn't work for me. i still got

Re: [squid-users] problem with 2 proxies in same network

Am Mittwoch, den 18.01.2006, 10:38 +0100 schrieb Mark Elsen: this workaround compiling squid again without --enable-ntlm-fail didn't work for me. i still got authentication windows on the other proxy. i can't test it deeper, 'cause browsing through the internet will become

[squid-users] problem with 2 proxies in same network

hi list, i have two proxies on the same network/domain (one is a clone of another) their names are proxy1 and proxy2. I wanted to update one proxy from version 2.5-STABLE10 to STABLE 12. After this update the network authentication via ntlm_auth doesn't work anymore. so i tried to create a

AW: [squid-users] problem with 2 proxies in same network

--enable-poll --enable-x-accelerator-vary Cheers andrew -Ursprüngliche Nachricht- Von: Mark Elsen [mailto:[EMAIL PROTECTED] Gesendet: Montag, 16. Januar 2006 18:19 An: Mrvka Andreas Cc: squid-users@squid-cache.org Betreff: Re: [squid-users] problem with 2 proxies in same network hi

AW: [squid-users] problem with 2 proxies in same network

-Ursprüngliche Nachricht- Von: Mark Elsen [mailto:[EMAIL PROTECTED] Gesendet: Montag, 16. Januar 2006 22:59 An: Mrvka Andreas Cc: Squid-Users Betreff: Re: [squid-users] problem with 2 proxies in same network You may need : http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5

[squid-users] owa access

hi list, i know, there are many writings about outlook web access and how to configure it with transparent proxy. but i still have problems :-( I configured my proxy like this: http_port 80 httpd_accel_host internalmailserver httpd_accel_port 80 httpd_accel_single_host on

AW: [squid-users] owa access

. Your Squid config seems OK. Be sure to create a host entry for your mailserver in /etc/hosts that points to the real (internal) IP of the OWA server. Good luck! -Jason -Original Message- From: Mrvka Andreas [mailto:[EMAIL PROTECTED] Sent: Monday, July 25, 2005 2:08 AM

[squid-users] authentication on websites with java problems

Hi list, We have squid 2.5STABLE10 running very fine. We authenticate via ntlm_auth to MS AD. Everything works fine as expected _except_ webpages with java plugins. If Sun's JRE wants to authenticate to fetch some class files from the internet, i don't see any username in log. With sun's

Re: [squid-users] suse 9.1 preinstalled squid3

Am Mittwoch, 25. August 2004 21:44 schrieb Henrik Nordstrom: [...] As an official standpoint from the Squid developers PRE releases is not supported on the squid-users mailinglist, only STABLE releases (this to limit the confusion due to configuration syntax changes). In addition any user

[squid-users] suse 9.1 preinstalled squid3

hi list, i have suse linux 9.1 where squid3 is precompiled but i dont get it running authenticating my users with active directory. here my squid.conf: [...] auth_param basic program /usr/sbin/squid_ldap_auth -p 389 -u cn -R -b dc=subdomain,dc=domain,dc=com -D

Re: [squid-users] suse 9.1 preinstalled squid3

-PRE3 for i686-pc-linux-gnu... Aug 25 14:26:45 proxy2 squid[9472]: Process ID 9472 please help, andrew Am Mittwoch, 25. August 2004 12:38 schrieb Mrvka Andreas: hi list, [...] auth_param ntlm program /usr/sbin/ntlm_auth -b DOMAIN/PDC DOMAIN/BDC for testing i use: echo user pass | /usr

[squid-users] Customize LogFormat patch not work

Hi guys, i use awstats and wanted to analyse squid 2.5-Stable5. i heard to use a patch for customizable logformat. but after patching and recompiling nothing changed. parseConfigFile: line 26 unrecognized: 'LogFormat combined %a %ui %un [%{%d/%b/%Y:%H:%M:%S +}tl] %rm %ru HTTP/%rv %Hs %st

Re: [squid-users] Customize LogFormat patch not work

? sorry, i'm not handy in playing with patch files... regards andrew Am Mi, 2004-06-09 um 10.20 schrieb Mirosaw Jaworski: Cytowanie Mrvka Andreas [EMAIL PROTECTED]: Hi guys, i use awstats and wanted to analyse squid 2.5-Stable5. i heard to use a patch for customizable logformat. Hi

[squid-users] one website denies access

hi, i have a standard config of squid.conf and surfing to every public website on the world works good except one! http://www.gmp-navigator.com normally, i surf with ntlm authentication (challenge and response) so that i access.log there is first access denied because of no username

[squid-users] one website denies access

hi, i have a standard config of squid.conf and surfing to every public website on the world works good except one! http://www.gmp-navigator.com normally, i surf with ntlm authentication (challenge and response) so that i access.log there is first access denied because of no username

[squid-users] content filter ceberian

hi! i read about the content filter ceberian and think about using it. BUT i've found anywhere on the website www.ceberian.com any information for virus checking. please tell me something about the product. this is an external helper (as i read). if someone downloads a file over squid, does

[squid-users] does squid work with content filter tools?

hi does squid work with content filter tools to keep surfing safe? thanks in advance for response. Andrew

AW: [squid-users] does squid work with content filter tools?

hi i already use squidguard and it works good. i think of content checking for filtering virus infections. may be it is something like antonio manfreda (Thu 22.01.2004 09:35) answered. i want to be able to scan downloaded documents. Andrew -Ursprüngliche Nachricht- Von: [EMAIL

[squid-users] windows server 2003

hi guys! is there a difference between the new windows server 2003 and win2k or winxp? i have a suse linux squid box with ntlm autentication method via ldap to our active directory primary domain controller. i recently installed on a machine windows server 2003, configured as usual the internet

AW: [squid-users] windows server 2003

-Ursprungliche Nachricht- Von: Serassio Guido [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 18. Juli 2003 10:25 i recently installed on a machine windows server 2003, configured as usual the internet explorer (6.0) but there i cannot browse through the internet. has anyone

AW: [squid-users] windows server 2003

-Ursprungliche Nachricht- Von: Serassio Guido [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 18. Juli 2003 10:25 i recently installed on a machine windows server 2003, configured as usual the internet explorer (6.0) but there i cannot browse through the internet. has anyone

[squid-users] IE - file upload problem

hi! what can i do against my problem? i am surfing with internet explorer 6 with all windows updates. i upload a file on a web formular through squid to a webserver and everything is ok. but when i come back to the original webpage to select another file and click upload again, then squid