[squid-users] NTLM auth popup boxes Solaris 8 tuning for upgrade into 2.7.4

2008-11-12 Thread vincent.blondel
hello all, I currently get some sun v210 boxes running solaris 8 and squid-2.6.12 and samba 3.0.20b I will upgrade these proxies into 2.7.4/3.0.32 next monday but before doing this I would like to ask you your advices and/or experiences with tuning these kind of boxes. the service is running

RE: [squid-users] NTLM auth popup boxes Solaris 8 tuning for upgrade into 2.7.4

2008-11-13 Thread vincent.blondel
hello all, I currently get some sun v210 boxes running solaris 8 and squid-2.6.12 and samba 3.0.20b I will upgrade these proxies into 2.7.4/3.0.32 next monday but before doing this I would like to ask you your advices and/or experiences with tuning these kind of boxes. the service is running

RE: [squid-users] NTLM auth popup boxes Solaris 8 tuning for upgrade into 2.7.4

2008-11-14 Thread vincent.blondel
hello all, I currently get some sun v210 boxes running solaris 8 and squid-2.6.12 and samba 3.0.20b I will upgrade these proxies into 2.7.4/3.0.32 next monday but before doing this I would like to ask you your advices and/or experiences with tuning these kind of boxes. the service is running

RE: [squid-users] NTLM auth popup boxes Solaris 8 tuning for upgrade into 2.7.4

2008-11-16 Thread vincent.blondel
hello all, I currently get some sun v210 boxes running solaris 8 and squid-2.6.12 and samba 3.0.20b I will upgrade these proxies into 2.7.4/3.0.32 next monday but before doing this I would like to ask you your advices and/or experiences with tuning these kind of boxes. the service is

RE: [squid-users] NTLM auth popup boxes Solaris 8 tuning for upgrade into 2.7.4

2008-11-19 Thread vincent.blondel
Before digging deep into OS settings check your squid.conf auth, acl and http_access settings. okay let's go concerning auth part of the squid.conf, I would like to say, nothing special .. below the ntlm config part auth_param ntlm program /usr/local/bin/ntlm_auth

RE: [squid-users] NTLM auth popup boxes Solaris 8 tuning for upgrade into 2.7.4

2008-11-19 Thread vincent.blondel
auth_param ntlm ttl do you advice using it because I do not find any reference on it on squid configuration guide website. you spoke about ttl parameter .. do you advice using it ?? Not sure who spoke about an auth_param ntlm ttl parameter, but there is no such parameter. The ntlm

[squid-users] winbind directories permissions issue

2008-12-04 Thread vincent.blondel
Hello all, I really get a strange ( maybe not ?? ) problem. I get Squid 2.7.4 running on Solaris 8 with Samba 3.0.32. My clients are essentially running Windows XP SP2 with IE6. authentication scheme is exclusively based on ntlm so this is the reason why winbindd is also running, smbd and nmbd

RE: [squid-users] winbind directories permissions issue

2008-12-04 Thread vincent.blondel
Hello all, I really get a strange ( maybe not ?? ) problem. I get Squid 2.7.4 running on Solaris 8 with Samba 3.0.32. My clients are essentially running Windows XP SP2 with IE6. authentication scheme is exclusively based on ntlm so this is the reason why winbindd is also running, smbd

RE: [squid-users] winbind directories permissions issue

2008-12-06 Thread vincent.blondel
Hello all, I really get a strange ( maybe not ?? ) problem. I get Squid 2.7.4 running on Solaris 8 with Samba 3.0.32. My clients are essentially running Windows XP SP2 with IE6. authentication scheme is exclusively based on ntlm so this is the reason why winbindd is also running, smbd

RE: [squid-users] winbind directories permissions issue

2008-12-08 Thread vincent.blondel
Hello all, I really get a strange ( maybe not ?? ) problem. I get Squid 2.7.4 running on Solaris 8 with Samba 3.0.32. My clients are essentially running Windows XP SP2 with IE6. authentication scheme is exclusively based on ntlm so this is the reason why winbindd is also running, smbd and

RE: [squid-users] winbind directories permissions issue

2008-12-09 Thread vincent.blondel
... I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at a time where

RE: [squid-users] winbind directories permissions issue

2008-12-15 Thread vincent.blondel
... Amos I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at a time

RE: [squid-users] winbind directories permissions issue

2008-12-15 Thread vincent.blondel
... Amos I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at a

RE: [squid-users] winbind directories permissions issue

2008-12-15 Thread vincent.blondel
... Amos I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at a

RE: [squid-users] winbind directories permissions issue

2008-12-17 Thread vincent.blondel
... Amos I made some cut from our previous posts to avoid any confusion. Sorry I haven't had much to do with winbind than we have already tried. you are the first I've seen where these fixes have not worked. Can you get a full ls -la trace of the directory content and permissions at

[squid-users] authenticate_ip_shortcircuit

2009-01-06 Thread vincent.blondel
hello all, just little question to know if somebody plans including ip_shortcircuit in 'squidclient mgr:' info pages. It should be interesting to get the list of mappings ip/identification. I should also be interesting to get another shortcircuit instruction like 'ip_shortcircuit_size' to limit

[squid-users] Squid 2.7 Chained Proxies and NTLM Pass-thru

2009-01-16 Thread vincent.blondel
hello all, my clients should access an IIS website requesting ntlm authentication 'WWW-Authentication'. they all use ie6 and proxied through a chain of two proxies. the first one hosted in internal network making the whole job of logging, validating ntlm authentication coming from all the ie's

[squid-users] ICP behaviour question ?

2009-04-14 Thread vincent.blondel
Hello all, I am doing some tests for implementing ICp in our SQUID platform including two level of SQUID devices, the SQUID proxies the users are connected on and the Gateways directly connected on the internet. After reading some old pdf documents I found on the net it seems if I good

[squid-users] ICP vs Cache Digest

2009-04-27 Thread vincent.blondel
Hello all, something I do not understand .. I plan enabling ICP between my squid proxy web caches hosted in internal lan area and my internet gateways hosted in dmz area. Everything seem to work correctly, I see the ICP packets exchanged between all devices except I always receive this type of

[squid-users] RE: ICP vs Cache Digest

2009-04-29 Thread vincent.blondel
Hello all, something I do not understand .. I plan enabling ICP between my squid proxy web caches hosted in internal lan area and my internet gateways hosted in dmz area. Everything seem to work correctly, I see the ICP packets exchanged between all devices except I always receive this type of

RE: [squid-users] RE: ICP vs Cache Digest

2009-05-03 Thread vincent.blondel
Hello all, something I do not understand .. I plan enabling ICP between my squid proxy web caches hosted in internal lan area and my internet gateways hosted in dmz area. Everything seem to work correctly, I see the ICP packets exchanged between all devices except I always receive this type of

[squid-users] TCP response time | Proxy efficiency | Paging .. pending questions

2009-08-25 Thread vincent.blondel
Hello all, when looking on the good working of one of my squid proxies, I see some values I think somewhat relevant for increasing the cache_mem. next to my investigations I can see this machine receives some 130req/s, sends some 80 req/s, caches some 1.2 million objects on disk. this is the

RE: [squid-users] TCP response time | Proxy efficiency | Paging .. pending questions

2009-08-26 Thread vincent.blondel
no I do not. I simply manage some 30 squid servers and I included in this mail some statistics from one of these proxies because I think I should increase the cache_mem value for some of them but I am not really sure about my suggestions ... so if some of you have deep experience in it I would be

[squid-users] RE: TCP response time | Proxy efficiency | Paging .. pending questions

2009-08-27 Thread vincent.blondel
Hello all, when looking on the good working of one of my squid proxies, I see some values I think somewhat relevant for increasing the cache_mem. next to my investigations I can see this machine receives some 130req/s, sends some 80 req/s, caches some 1.2 million objects on disk. this is

[squid-users] deny access with squid_ldap_group

2009-09-16 Thread vincent.blondel
Hello, I am trying to block Internet access for people member of one specific AD Security group called GSIFBENoInternetAccess but I get some issue with it. When I try the squid_ldap_group process from shell, the mechanism is working well. my service account correctly requests our Active

RE: [squid-users] deny access with squid_ldap_group

2009-09-17 Thread vincent.blondel
Hello, I am trying to block Internet access for people member of one specific AD Security group called GSIFBENoInternetAccess but I get some issue with it. When I try the squid_ldap_group process from shell, the mechanism is working well. my service account correctly requests our Active

[squid-users] squid_ldap_group concurrency

2009-10-05 Thread vincent.blondel
Hello all, have somebody already get some experience with squid_ldap_group on squid 2.7.X because I try to find some info on what reasonable value I can define for concurrency and if concurrency can also be used with children ... let we say something like this : external_acl_type name

[squid-users] squid 2.7 with auth passthrough

2009-11-25 Thread vincent.blondel
Hello, Can somebody say me if WWW-Authenticate header is really functional on Squid 2.7.4 because I spent the whole day trying to help one business user with his application and always receive 401 error code. my proxy should reach the origin IIS server directly next to the

RE: [squid-users] squid 2.7 with auth passthrough

2009-11-30 Thread vincent.blondel
Hello, Can somebody say me if WWW-Authenticate header is really functional on Squid 2.7.4 because I spent the whole day trying to help one business user with his application and always receive 401 error code. my proxy should reach the origin IIS server directly next to the

RE: [squid-users] squid 2.7 with auth passthrough

2009-12-02 Thread vincent.blondel
On Tue, 01 Dec 2009 12:12:52 +1300, Amos Jeffries squ...@treenet.co.nz wrote: On Mon, 30 Nov 2009 13:38:17 +0100, vincent.blon...@ing.be wrote: Hello, Can somebody say me if WWW-Authenticate header is really functional on Squid 2.7.4 because I spent the whole day trying to help one business

RE: [squid-users] any work arounds for bug 2176

2009-12-21 Thread vincent.blondel
Hello all, Just to inform you I exactly get the same problem. Firstly I thought it was a problem with WWW-Authenticate but it is not ONLY next is the reference of my first post ... http://www.squid-cache.org/mail-archive/squid-users/200912/0029.html I also get this same message (

RE: [squid-users] any work arounds for bug 2176

2010-01-11 Thread vincent.blondel
On Fri, Jan 01, 2010 at 12:36:12AM +1300, Amos Jeffries wrote: I've taken a good look at the trace files on this. It's clear that the client is in fact not sending the whole initial POST. What I see happening is that the server early response gets relayed by Squid and if the connection

[squid-users] coredump files location on Solaris 8

2010-01-13 Thread vincent.blondel
Hello all, Can somebody say me how I can solve the way Squid stores coredump files because I already tried to use coredump_dir and/or starting Squid from a dedicated directory but none of them seem to work on Solaris 8 because dump files are always put in /var/core ? many thks Vincent

[squid-users] RE: coredump files location on Solaris 8

2010-01-14 Thread vincent.blondel
Hello all, Can somebody say me how I can solve the way Squid stores coredump files because I already tried to use coredump_dir and/or starting Squid from a dedicated directory but none of them seem to work on Solaris 8 because dump files are always put in /var/core ? nobody got this problem

RE: [squid-users] RE: coredump files location on Solaris 8

2010-01-14 Thread vincent.blondel
Hi, I am no Solaris expert, however what about changing the overall system variable on Solaris for crash / core locations to per process core locations? http://www.c0t0d0s0.org/archives/4388-Less-known-Solaris-features-About

[squid-users] small objects memory caching issue ?

2010-12-02 Thread vincent.blondel
After some memory upgrade to 4GB RAM, I am trying to optimize my squid caches to maintain as most as little objects in memory without storing them on disk. Big objects are not kept in memory but stored on disk. these are my config parameters ... cache_mem 600 MB memory_replacement_policy heap

RE: [squid-users] small objects memory caching issue ?

2010-12-04 Thread vincent.blondel
After some memory upgrade to 4GB RAM, I am trying to optimize my squid caches to maintain as most as little objects in memory without storing them on disk. Big objects are not kept in memory but stored on disk. these are my config parameters ... cache_mem 600 MB

[squid-users] deny_info TCP_RESET all ?

2008-08-25 Thread vincent.blondel
just one little question. I am trying to get 'deny_info TCP_RESET all' working but cannot. I get a sunos 5.8 running a squid 2.6.12 and I would like not sending any error page to all clients. Maybe I did not really understand the real meaning of this statement but I understand that a reset plus

RE: [squid-users] deny_info TCP_RESET all ?

2008-08-25 Thread vincent.blondel
[EMAIL PROTECTED] wrote: just one little question. I am trying to get 'deny_info TCP_RESET all' working but cannot. I get a sunos 5.8 running a squid 2.6.12 and I would like not sending any error page to all clients. Maybe I did not really understand the real meaning of this statement but

[squid-users] compilation issue squid-2.7.STABLE4 on Solaris 8.

2008-10-11 Thread vincent.blondel
Hello all, When I compile squid 2.6.21 on Solaris 8, I do not get any problem. Everything is running fine but when I try to compile last release 2.7.4 compilation ends with this error message .. . Making all in lib make[1]: Entering directory `/home/u7206160/gnu/squid/squid-2.7.STABLE4/lib' if

RE: [squid-users] compilation issue squid-2.7.STABLE4 on Solaris 8.

2008-10-12 Thread vincent.blondel
On lör, 2008-10-11 at 18:30 +0200, [EMAIL PROTECTED] wrote: Hello all, When I compile squid 2.6.21 on Solaris 8, I do not get any problem. Everything is running fine but when I try to compile last release 2.7.4 compilation ends with this error message .. DO you get the same error if you

[squid-users] URL cnbc.com : Video Streaming Problems.

2007-04-11 Thread vincent.blondel
Hello all, Our dealing room is trying to read some video streaming on www.cnbc.com ( Menu Video / Click on a Video ) but we encounter lots of problems with it because we cannot view these videos. We are using Squid-2.5-STABLE12 and it is not working. We also tried it with a very light config on

RE: [squid-users] URL cnbc.com : Video Streaming Problems.

2007-04-16 Thread vincent.blondel
ons 2007-04-11 klockan 20:42 +0200 skrev Vincent Blondel: On Wed, 2007-04-11 at 15:49 +0200, Henrik Nordstrom wrote: ons 2007-04-11 klockan 14:36 +0200 skrev [EMAIL PROTECTED]: Hello all, Our dealing room is trying to read some video streaming on www.cnbc.com ( Menu Video / Click

[squid-users] httpAccept: FD 51: accept failure: (130) Software caused connection abort.

2007-04-02 Thread vincent.blondel
Hello all, I have been working for ING bank in Belgium. I am responsible for the system administration of the Squid environnement to let our internal employees surf on the Internet. We get 15000 employees, all surfing through our 8 solaris servers. You can find below characteristics for all