[squid-users] The importance of the proxy name when using kerberos authentication

2012-10-03 Thread Sean Boran
Hi, This is not a question, but information I wanted to share :-) Having got kerberos authentication working a few weeks ago with squid on a test box, I came back to test again and could not get kerberos to work, The Browser(s) kept sending NTLM to squid (resulting in the omnious 'BH received

[squid-users] FATAL: Unable to open HTTP Socket

2012-10-03 Thread shahab bohlooli
Dear All, Recently, I chose to install and run Squid 3.2.1 on Debain Weezy/SID (64 bit) with 4 workers At the beginning every thing went well, but when the system goes under loads of 20 users (more or less) I lose workers sequentially until there went no kids to process the requests. In this time

[squid-users] Re: Squid: 3.HEAD giving error msgs and exiting with assertion failed:forward.cc:163:err

2012-10-03 Thread Ahmed Talha Khan
Hey All, Amons, I just looked deeper in the issue. gdb gives me the following bt (gdb) bt #0 0x766a73a5 in raise () from /lib/x86_64-linux-gnu/libc.so.6 #1 0x766aab0b in abort () from /lib/x86_64-linux-gnu/libc.so.6 #2 0x00516745 in xassert (msg=0x6fe1a4 err,

[squid-users] Re: Squid: 3.HEAD giving error msgs and exiting with assertion failed:forward.cc:163:err

2012-10-03 Thread Ahmed Talha Khan
Relevant portion of cache.log when debugging with debug_options 17 10 in squid.conf as 17 refers to forwarding. 2012/10/03 13:37:35.780| forward.cc(943) dispatch: local=192.168.8.230:3128 remote=192.168.8.211:44183 FD 27 flags=1: Fetching 'POST http://www.facebook.com/ajax/proxy.php' 2012/10/03

Re: [squid-users] FATAL: Unable to open HTTP Socket

2012-10-03 Thread Amos Jeffries
On 3/10/2012 7:56 p.m., shahab bohlooli wrote: Dear All, Recently, I chose to install and run Squid 3.2.1 on Debain Weezy/SID (64 bit) with 4 workers At the beginning every thing went well, but when the system goes under loads of 20 users (more or less) I lose workers sequentially until there

Re: [squid-users] Squid - wccp with multiple routers using gre tunnels

2012-10-03 Thread Amos Jeffries
On 3/10/2012 1:17 a.m., Luderitz Bob wrote: We just cutover to our own network which has 3 sites using vpls connections and 1 ASA 5510 box used for both Firewall and Router at our HQ site. For our Internet we want to use a message labs external proxy and have introduced a

Re: [squid-users] Question about auth radius and 802.1x authentication.

2012-10-03 Thread Amos Jeffries
On 2/10/2012 8:43 p.m., Eliezer Croitoru wrote: On 10/2/2012 8:55 AM, Amos Jeffries wrote: On 2/10/2012 4:45 p.m., Eliezer Croitoru wrote: The current authenticators for squid using ntlm\kerb etc but based on forward connection to the proxy. how about using 802.1x authentication to radius?

Re: [squid-users] Question about auth radius and 802.1x authentication.

2012-10-03 Thread Eliezer Croitoru
On 10/3/2012 12:05 PM, Amos Jeffries wrote: The Squid bits by me. The latest round of kernel bits by Krisztian Kovacs on netfiler-devel mailing list. Amos I will start here. I wrote some code to use trpoxy and I seems to get the hang of it. basically I want to filter more then just HTTP and

Re: [squid-users] FATAL: Unable to open HTTP Socket

2012-10-03 Thread shahab bohlooli
Hi,thank you for quick reply. The reconfigure action happens by itself. In fact, It is the point that afterward I see the fore mentioned FATAL error Unable to open HTTP Socket. also, I used top -uproxy command to see which processes still alive. squid-coordinatior and squid-disk processes were

Re: [squid-users] TCP_DENEID_REPLY/403 Microsoft Upgrade Adviser

2012-10-03 Thread dweimer
On 2012-10-02 19:57, Amos Jeffries wrote: On 03.10.2012 03:09, dweimer wrote: On 2012-09-30 05:12, Amos Jeffries wrote: On 28/09/2012 7:11 a.m., E.S. Rosenberg wrote: 2012/9/27 dweimer : Our help desk is trying to run the Microsoft Windows 7 Upgrade Adviser, and ran into an issue, the Squid

[squid-users] bump server first

2012-10-03 Thread Oguz Yilmaz
Hello, I just wanted to learn status of ssl_bump server-first patch. Is it in trunk? For testing, should I use direct patch or possible to get from turnk. Thank you, -- Oguz YILMAZ

[squid-users] Squid3 reverse proxy ntlm authentication

2012-10-03 Thread muno
I need to configure the Squid3 to authenticate via NTLM reverse proxy authentication. I have instaled and configured the squid but the browser requires the password again and again. Anyone have a clue to help me? Here my configuration: ./configure --prefix=/usr/local/squid

Re: [squid-users] Squid3 reverse proxy ntlm authentication

2012-10-03 Thread Amos Jeffries
On 04.10.2012 09:53, muno wrote: I need to configure the Squid3 to authenticate via NTLM reverse proxy authentication. I have instaled and configured the squid but the browser requires the password again and again. NTLM on a reverse proxy or web server is a very bad idea. It was designed for

[squid-users] Re: Compile error Squid 3.2.1

2012-10-03 Thread Cameron Charles
Hi, In response to this mailing list thread http://www.squid-cache.org/mail-archive/squid-users/201208/0299.html I am having the same trouble as Jeff, same errors whilst trying to compile, more specifically the make stage of installation, im using centOS 5 and have tried both my complicated