[squid-users] slow response for cached objects

2008-10-29 Thread nitesh naik
Hi, Sometimes I see squid is taking time in delivering contents even if object is available in its cache. Any idea what could be the reason? I used external url rewrite program to strip the query string. Is it slowing down serving process ? First 2 line shows squid took 703 milliseconds to

Re: [squid-users] slow response for cached objects

2008-10-29 Thread Henrik Nordstrom
On ons, 2008-10-29 at 15:08 +0530, nitesh naik wrote: Hi, Sometimes I see squid is taking time in delivering contents even if object is available in its cache. Any idea what could be the reason? I used external url rewrite program to strip the query string. Is it slowing down serving

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Guido Serassio
Hi, At 14.00 28/10/2008, Josh Haft wrote: Firefox can't grab NTLM creds like IE does. This is really a VERY wrong assertion. Firefox supports all Squid authentication schema (Basic, Digest NTLM and Negotiate) starting from version 1.5, while this is true for Internet Explorer starting from

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread matlor
How can I solve my problem? what's wrong? Have I to post my squid.conf? thanks Guido Serassio wrote: Hi, At 14.00 28/10/2008, Josh Haft wrote: Firefox can't grab NTLM creds like IE does. This is really a VERY wrong assertion. Firefox supports all Squid authentication schema (Basic,

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Chris Nighswonger
On Tue, Oct 28, 2008 at 6:18 AM, matlor [EMAIL PROTECTED] wrote: I have configured squid with winbind integrated in the active directory of a windows 2003 domain. If I browse internet trough IE 7 everething is ok, no user and password prompted, because of the common login. While, if I open

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Chris Nighswonger
On Wed, Oct 29, 2008 at 10:23 AM, nairb rotsak [EMAIL PROTECTED] wrote: I am totally confused by this statement?.. as I have 300 people using firefox right now.. using Ubuntu 6.06, Samba3, Squid2.. and not a single one gets a user/pass prompt? I am not using it as a transparent proxy, it is

Re: [squid-users] slow response for cached objects

2008-10-29 Thread Nitesh Naik
Henrik, We use Squid 3 version and I could see these delays at client end also. Direct request to origin hands out object much faster as compared to squid. Squid is holding up the connections and I could see 3000+ connections on loadbalancer when squid is used and 500 connection when origin is

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread nairb rotsak
I am totally confused by this statement?.. as I have 300 people using firefox right now.. using Ubuntu 6.06, Samba3, Squid2.. and not a single one gets a user/pass prompt? I am not using it as a transparent proxy, it is listed in firefox under proxy settings (8080 because it goes to DG first..

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Stefan Adams
On Wed, Oct 29, 2008 at 9:31 AM, Chris Nighswonger [EMAIL PROTECTED] wrote: On Wed, Oct 29, 2008 at 10:23 AM, nairb rotsak [EMAIL PROTECTED] wrote: I am totally confused by this statement?.. as I have 300 people using firefox right now.. using Ubuntu 6.06, Samba3, Squid2.. and not a single one

[squid-users] NTLMv2 issue caused by Samba's Winbind helper

2008-10-29 Thread Jamie Stallwood
Hi, One of my customers has had issues with authentication Vista machines when using the Samba 2.0 winbind authenticator program in Squid. The NTLM authenticator returned: Login for user [EMAIL PROTECTED] failed due to [Invalid parameter] auth_param ntlm program /usr/bin/ntlm_auth

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Josh Haft
Are you using any type of auth with your squid setup? I don't see it mentioned in your post. I too would be interested in knowing how you got integrated NTLM auth through firefox, if indeed you have. On Wed, Oct 29, 2008 at 9:31 AM, Chris Nighswonger [EMAIL PROTECTED] wrote: On Wed, Oct 29,

RE: [squid-users] Override the Accept-Encoding value

2008-10-29 Thread Alex Rousskov
On Tue, 2008-10-21 at 20:19 +0200, Henrik Nordstrom wrote: On tis, 2008-10-21 at 20:09 +0200, Christian Tzolov wrote: Hi Henrik, Thank you for the clarification. Do you know any other approach (or tool) that can help me to replace the accept-encoding header before it is processed

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread nairb rotsak
Always forget to hit the 'reply to all' instead of the 'reply'.. sorry.. below is what I sent Chris: Below is for w2k3 AD and Ubuntu 6.06.1: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 15 auth_param ntlm max_challenge_reuses 0

Re: [squid-users] Authentication between Samba 3 and Squid

2008-10-29 Thread Adam McCarthy
Alright, but is there any good source on a Samba 3 + Squid 2.7 + Firefox/IE. I have tried tons at Google, and many are just flat out outdated and others just don't seem to work right, no matter how many times I double check my steps. On Tue, Oct 28, 2008 at 4:16 PM, Kinkie [EMAIL PROTECTED]

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Chris Nighswonger
On Wed, Oct 29, 2008 at 5:16 PM, nairb rotsak [EMAIL PROTECTED] wrote: http_access allow all NTLMUsers Does the 'all' trump the 'NTLMUsers' acl here? Chris - Original Message From: Chris Nighswonger [EMAIL PROTECTED] To: nairb rotsak [EMAIL PROTECTED] Cc: matlor [EMAIL

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Chris Robertson
Chris Nighswonger wrote: On Wed, Oct 29, 2008 at 5:16 PM, nairb rotsak [EMAIL PROTECTED] wrote: http_access allow all NTLMUsers Does the 'all' trump the 'NTLMUsers' acl here? Chris The all is redundant. The all ACL will always match, so the test next falls to checking the

Re: [squid-users] NTLMv2 issue caused by Samba's Winbind helper

2008-10-29 Thread Amos Jeffries
Jamie Stallwood wrote: Hi, One of my customers has had issues with authentication Vista machines when using the Samba 2.0 winbind authenticator program in Squid. The NTLM authenticator returned: Login for user [EMAIL PROTECTED] failed due to [Invalid parameter] auth_param ntlm program

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Amos Jeffries
Chris Robertson wrote: Chris Nighswonger wrote: On Wed, Oct 29, 2008 at 5:16 PM, nairb rotsak [EMAIL PROTECTED] wrote: http_access allow all NTLMUsers Does the 'all' trump the 'NTLMUsers' acl here? Chris The all is redundant. The all ACL will always match, so the test next falls

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Henrik Nordstrom
On ons, 2008-10-29 at 14:16 -0700, nairb rotsak wrote: http_access allow all NTLMUsers http_access allow our_networks The our_networks line can not be reached. This should probably be http_access allow our_networks NTLMUsers http_access deny all Regards Henrik signature.asc Description:

Re: [squid-users] NTLMv2 issue caused by Samba's Winbind helper

2008-10-29 Thread Henrik Nordstrom
On ons, 2008-10-29 at 17:23 +, Jamie Stallwood wrote: This is caused by Samba - does anyone know if this will ever be fixed properly? Have you verified that it isn't fixed already? Samba 2.0 is quite dated.. Current production Samba release is 3.2.4 and the legacy version is 3.0.32.

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-10-29 Thread Chuck Kollars
If I browse internet trough IE 7 everething is ok, no user and password prompted, because of the common login. While, if I open Firefox (2 or 3 version), it prompts for user and password. Firefox can't grab NTLM creds like IE does. Yep, as FireFox is not a Microsoft product and as it

[squid-users] Join 5 squid+ ldap server to single server

2008-10-29 Thread Firdaus Tjahyadi
Dear All I have 5 group of internet user using ldap and we have 512Kb internet bandwith from our ISP like this 1. Diamond = 256kb bandwith 2. Gold= 128kb bandwith 3. silver = 64kb bandwith 4. Bronze = 32kb bandwith 5. other = 32kb bandwith i use squid_ldap_auth like this auth_param