[squid-users] squid 3.3.8 kerberos and ldap auth

2014-09-01 Thread Victor Gusev
Hi all! Please help me. My problem is: I want to setup squid with two auth methods. The first method is: kerberos auth. The second is: BASIC ldap auth as a fail back method for users without a kerberos ticket. I see that is don't work. When user wants to login without kerberos, browser (IE

[squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Santosh Bhabal
Hello Experts, I am getting below error while compiling Squid 3.4.7 : [root@localhost squid-3.4.7]# make all Making all in compat make[1]: Entering directory `/opt/squid-3.4.7/compat' source='assert.cc' object='assert.lo' libtool=yes \ DEPDIR=.deps depmode=none /bin/sh ../cfgaux/depcomp

[squid-users] SSL Bump and certificate pinning

2014-09-01 Thread Steve Hill
Mozilla have announced that Firefox 32 does public key pinning: http://monica-at-mozilla.blogspot.co.uk/2014/08/firefox-32-supports-public-key-pinning.html Obviously this has the potential to render SSL-bump considerably less useful. At the moment it seems to be restricted to a small number

Re: [squid-users] SSL Bump and certificate pinning

2014-09-01 Thread Antony Stone
On Monday 01 September 2014 at 12:07:57 (EU time), Steve Hill wrote: Mozilla have announced that Firefox 32 does public key pinning: http://monica-at-mozilla.blogspot.co.uk/2014/08/firefox-32-supports-public- key-pinning.html Obviously this has the potential to render SSL-bump considerably

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/09/2014 9:34 p.m., Santosh Bhabal wrote: Hello Experts, I am getting below error while compiling Squid 3.4.7 : [root@localhost squid-3.4.7]# make all Making all in compat make[1]: Entering directory `/opt/squid-3.4.7/compat'

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Santosh Bhabal
CentOS release 6.3 (Final) x86_64 Regards Santosh On Mon, Sep 1, 2014 at 6:20 PM, Amos Jeffries squ...@treenet.co.nz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/09/2014 9:34 p.m., Santosh Bhabal wrote: Hello Experts, I am getting below error while compiling Squid 3.4.7 :

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/09/2014 12:53 a.m., Santosh Bhabal wrote: CentOS release 6.3 (Final) x86_64 Did you run ./configure before building? We built Squid on CentOS 6 and 7 without problems before releasing. Amos -BEGIN PGP SIGNATURE- Version: GnuPG

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Santosh Bhabal
Yes, './configure --prefix=/usr/local/squid' command successfully completed. Facing issue with 'make all' command. Regards Santosh On Mon, Sep 1, 2014 at 6:33 PM, Amos Jeffries squ...@treenet.co.nz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/09/2014 12:53 a.m., Santosh Bhabal

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Antony Stone
On Monday 01 September 2014 at 15:17:58 (EU time), Santosh Bhabal wrote: Yes, './configure --prefix=/usr/local/squid' command successfully completed. Facing issue with 'make all' command. Have you successfully compiled other software on this machine? Antony -- If you were ploughing a

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Santosh Bhabal
Yes :) Regards Santosh On Mon, Sep 1, 2014 at 6:50 PM, Antony Stone antony.st...@squid.open.source.it wrote: On Monday 01 September 2014 at 15:17:58 (EU time), Santosh Bhabal wrote: Yes, './configure --prefix=/usr/local/squid' command successfully completed. Facing issue with 'make all'

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/09/2014 1:21 a.m., Santosh Bhabal wrote: Yes :) Can you mail me the config.log and include/autoconf.h files produced by the Squid ./configure please? Amos -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32)

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread James Lay
On Mon, 2014-09-01 at 18:51 +0530, Santosh Bhabal wrote: Yes :) Regards Santosh On Mon, Sep 1, 2014 at 6:50 PM, Antony Stone antony.st...@squid.open.source.it wrote: On Monday 01 September 2014 at 15:17:58 (EU time), Santosh Bhabal wrote: Yes, './configure

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Santosh Bhabal
Please find the attached autoconf.h Regards Santosh On Mon, Sep 1, 2014 at 6:55 PM, Amos Jeffries squ...@treenet.co.nz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/09/2014 1:21 a.m., Santosh Bhabal wrote: Yes :) Can you mail me the config.log and include/autoconf.h files

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Your machine is missing a C++ compiler. Squid is known to build on g++ and usually clang or Intel CC. Others are a best-effort situation. Amos -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (MingW32)

Re: [squid-users] error: #error .... is not 32-bit or 64-bit

2014-09-01 Thread Eliezer Croitoru
On 09/01/2014 12:34 PM, Santosh Bhabal wrote: Hello Experts, I am getting below error while compiling Squid 3.4.7 : To make sure you have everything to build squid try to run this script: http://www1.ngtech.co.il/squid/basic_data.sh It will give many details and also one of them is the

Re: [squid-users] Forward Proxy Mode HTTPS Connect with invalid server certificate

2014-09-01 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/08/2014 6:55 a.m., Eduard Deffner wrote: Dear Team! My problem is about using squid in the forward proxy mode. Squid Version 3.3.8 under openSUSE 13.1 in conjunction with squidguard The general function everythings works well. But if any

Re: [squid-users] SSL Bump and certificate pinning

2014-09-01 Thread Eliezer Croitoru
On 09/01/2014 01:19 PM, Antony Stone wrote: Fromhttps://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinning Starting with FF 32, it's on by default, so you don't have to do anything. The pinning level is enforced by a pref, security.cert_pinning.enforcement_level 0. Pinning disabled 1.

Re: [squid-users] Forward Proxy Mode HTTPS Connect with invalid server certificate

2014-09-01 Thread Eliezer Croitoru
On 08/29/2014 09:55 PM, Eduard Deffner wrote: Dear Team! My problem is about using squid in the forward proxy mode. Squid Version 3.3.8 under openSUSE 13.1 in conjunction with squidguard The general function everythings works well. But if any client in our LAN try to connect to a https-Site

[squid-users] I was wondering about htcp and ssl connections.

2014-09-01 Thread Eliezer Croitoru
Hey All, I am unsure what would be the result and there for asking. In a case I have couple cache_peers and they are htcp enabled, would the main ssl_bump server send htcp query to the cache_peers about any of the https urls? (I want it to do that..) Thanks, Eliezer

Re: [squid-users] squid yum install

2014-09-01 Thread Eliezer Croitoru
On 08/29/2014 09:43 PM, Lawrence Pingree wrote: Awesome! Thank you. Will that roll into their prod repositories? I am not sure about it, Sorry. Eliezer