Re: [squid-users] Re: squid_kerb_auth problem

2010-01-13 Thread Umesh Bodalina
Hi, I'm new to this. I've run the following command on the server: ldapsearch -L -x -D aduser -w password -h domainfqdn -p 389 -b OU=name,DC=domain,DC=com serviceprincipalname=HTTP/f...@realm and get # # LDAPv3 # base OU=name,DC=domain,DC=com with scope subtree # filter:

Re: [squid-users] Persistent connections w/ transparent proxy

2010-01-13 Thread Matus UHLAR - fantomas
On 30.12.09 16:20, Jason Cromes wrote: Basically, the client makes an HTTP 1.1 GET request for a page but doesn't explicitly specify Connection: keep-alive. This shouldn't matter though as 1.1 connections are persistent by default (or so I read). Since Squid is still not fully http-1.1

Re: [squid-users] Homeserver, quest for review

2010-01-13 Thread Matus UHLAR - fantomas
On 03.01.10 11:59, Heinz Diehl wrote: I'm planning to set up squid (2.7-STABLE7) on a small homeserver, which is responsible for max. 4 people. The machine has 8GB RAM and the squid cache_dir will reside on a second harddisk with 30GB space. This is what I've planned to configure:

RE: [squid-users] Keeping archiving access.log

2010-01-13 Thread Drunkard
在 2010-01-12二的 16:19 -0300,Guido Marino Lorenzutti写道: Ops.. that's too much. I have severeal squids, and I must keep the log from one month and it's a lot of space. I was thinking about something like btrfs to store them. I'm doing same thing. I use a standalone syslog server which runs

Re: [squid-users] Block Proxy sharing

2010-01-13 Thread Matus UHLAR - fantomas
On 07.01.10 10:18, Niti Lohwithee wrote: I 'm using Squid stable 2.5 stable 14 running on Linux ES 4 . My server use NCSA for authentication. that's damn old version... I have faced a problem about proxy sharing. Some users have set the another proxy server--CCproxy-- and point to my

Re: [squid-users] Persistent connections w/ transparent proxy

2010-01-13 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: On 30.12.09 16:20, Jason Cromes wrote: Basically, the client makes an HTTP 1.1 GET request for a page but doesn't explicitly specify Connection: keep-alive. This shouldn't matter though as 1.1 connections are persistent by default (or so I read). Since

Re: [squid-users] solaris 10 process size problem

2010-01-13 Thread Mario Garcia Ortiz
hello thanks do you run solaris 10 and your squid doesn't grow constantly in size? so far our squid has reached 800MB in one week... then it reaches 4GB it just simply crashes with a FATAL xalloc error. i am running latest 3.0 stable 21... i don't see how a older version would work better can

Re: [squid-users] solaris 10 process size problem

2010-01-13 Thread Mario Garcia Ortiz
I have not compiled squid in 64 bit i have heard is not stable. i don't really know if it's an advisable practise as squid was developped to run in 32 bits and the problem may just be delayed.. see older comments in this thread on the mailing list. i also utilise cache null - null cache so i have

Re: [squid-users] Block Proxy sharing

2010-01-13 Thread Kinkie
On Wed, Jan 13, 2010 at 11:48 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 07.01.10 10:18, Niti Lohwithee wrote: I 'm using Squid stable 2.5 stable 14 running on Linux ES 4 . My server use NCSA for authentication. that's damn old version... I have faced a problem about proxy

[squid-users] Squid with Kerberos

2010-01-13 Thread Olivier CALVANO
Hi I am search a good how to for add a Kerberos authentification at my Squid Proxy. Anyone have this ? Actually, i use Squid with NTLM Auth, when a user going on Internet, Squid don't open the user/pass windows, he use the login/pass of the user session (Ntlm + Winbind) I want same on Kerberos,

RE: [squid-users] Apache 301 redirects working with squid

2010-01-13 Thread Drew Wrobel
Date: Wed, 13 Jan 2010 11:48:53 +1300 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Apache 301 redirects working with squid Chris Robertson wrote: Drew Wrobel wrote: Date: Fri, 8 Jan 2010 12:23:11 -0900

Re: [squid-users] Squid with Kerberos

2010-01-13 Thread Kinkie
On Wed, Jan 13, 2010 at 3:03 PM, Olivier CALVANO o.calv...@gmail.com wrote: Hi I am search a good how to for add a Kerberos authentification at my Squid Proxy. Anyone have this ? http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos Actually, i use Squid with NTLM Auth, when a

[squid-users] SSBump.. could it be used for transparent proxying?

2010-01-13 Thread Dimitri Syuoul
Hello, Ive been reading over this new feature. It is unclear to me if this can be used for transparently proxying SSL (by this I mean not configuring any proxy in the computers of the clients.. it is ok if clients get cert warnings). Thank you. Dimitri

[squid-users] coredump files location on Solaris 8

2010-01-13 Thread vincent.blondel
Hello all, Can somebody say me how I can solve the way Squid stores coredump files because I already tried to use coredump_dir and/or starting Squid from a dedicated directory but none of them seem to work on Solaris 8 because dump files are always put in /var/core ? many thks Vincent

[squid-users] Re: Re: squid_kerb_auth problem

2010-01-13 Thread Markus Moeller
On AD you can use ADSIEDIT ( http://technet.microsoft.com/en-us/library/cc773354%28WS.10%29.aspx ) to search for entries and delete,modify them. The best instructions are http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos Let me know what you get once you deleted the old entry.

[squid-users] Squid vs WCCPv2 - Need help involving interpretation in Wireshark

2010-01-13 Thread Yanis Sauvé
Hello everyone, PIX 525, os 7.2(4), WCCPv2. CentOS 5.4 (2.6.18-164.6.1.el5.centos.plus). Configuration on PIX side seems to be valid, since I see a lot of traffic coming from the PIX on the cache-server in Wireshark when the redirection command is applied to the ingress interface. I was

Re: [squid-users] Squid vs WCCPv2 - Need help involving interpretation in Wireshark

2010-01-13 Thread Amos Jeffries
Yanis Sauvé wrote: Hello everyone, PIX 525, os 7.2(4), WCCPv2. CentOS 5.4 (2.6.18-164.6.1.el5.centos.plus). Configuration on PIX side seems to be valid, since I see a lot of traffic coming from the PIX on the cache-server in Wireshark when the redirection command is applied to the ingress

Re: [squid-users] Block Proxy sharing

2010-01-13 Thread Niti Lohwithee
On Wed, Jan 13, 2010 at 8:27 PM, Kinkie gkin...@gmail.com wrote: On Wed, Jan 13, 2010 at 11:48 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 07.01.10 10:18, Niti Lohwithee wrote: I 'm using Squid stable 2.5 stable 14 running on Linux ES 4 . My server use NCSA for authentication.