Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-21 Thread Eliezer Croitoru
t Mobile: +972-5-28704261 Email: ngtech1...@gmail.com Zoom: Coming soon -Original Message- From: Hideyuki Kawai Sent: Thursday, January 14, 2021 2:22 PM To: Eliezer Croitoru Cc: squid-dev@lists.squid-cache.org Subject: RE: [squid-dev] effective acl for tcp_outgoing_address Dear Eliezer Thank you

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-20 Thread Alex Rousskov
ng is denied here. HTH, Alex. > > -Original Message- > From: Alex Rousskov > Sent: Thursday, January 14, 2021 11:25 PM > To: squid-dev@lists.squid-cache.org > Cc: Hideyuki Kawai(川井秀行) > Subject: Re: [squid-dev] effective acl for tcp_outgoing_address > &

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-19 Thread Hideyuki Kawai
regards, Kawai - h.ka...@ntt.com - -Original Message- From: Alex Rousskov Sent: Thursday, January 14, 2021 11:25 PM To: squid-dev@lists.squid-cache.org Cc: Hideyuki Kawai(川井秀行) Subject: Re: [squid-dev] effective acl for tcp_o

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-15 Thread NgTech LTD
_ldap_group_acl” and “tcp_outgoing_address” and “note ACL”. > > > > Again, thanks for your support. > > > > Best regards, > > Kawai > > > > *From:* squid-dev *On Behalf Of > *?Amos Jeffries? > *Sent:* Friday, January 15, 2021 8:16 AM > *To:* Alex

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-14 Thread Hideyuki Kawai
ists.squid-cache.org Subject: Re: [squid-dev] effective acl for tcp_outgoing_address FYI, this use case is why recent versions of kerberos auth helper being used in the OP config produces group= annotations for authenticated users. The note ACL mentioned can check for group SSID any of the fast acc

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-14 Thread ‪Amos Jeffries‬
FYI, this use case is why recent versions of kerberos auth helper being used in the OP config produces group= annotations for authenticated users. The note ACL mentioned can check for group SSID any of the fast access checks.Amos Original message From: Alex Rousskov Date: Fri, 15

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-14 Thread Alex Rousskov
On 1/13/21 7:47 PM, Hideyuki Kawai wrote: > 1. "external_acl" can not use on tcp_outgoing_address. Because the > external_acl type is slow. My understanding is correct? Yes, your understanding is correct. There are cases where a slow ACL "usually works" with a tcp_outgoing_address directive due

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-14 Thread Eliezer Croitoru
er Croitoru Cc: squid-dev@lists.squid-cache.org Subject: RE: [squid-dev] effective acl for tcp_outgoing_address Dear Eliezer Thank you for your reply. Could you let me ask you about your comment. "slow acl" can use in tcp_outgoing_address? Best reg

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-14 Thread Hideyuki Kawai
r Croitoru Sent: Thursday, January 14, 2021 8:36 PM To: Hideyuki Kawai(川井秀行) Cc: squid-dev@lists.squid-cache.org Subject: RE: [squid-dev] effective acl for tcp_outgoing_address It's more of an users question. Just to clear it out, the tcp_outgoing_address is a fast acl just when the decision is

Re: [squid-dev] effective acl for tcp_outgoing_address

2021-01-14 Thread Eliezer Croitoru
ngtech1...@gmail.com Zoom: Coming soon -Original Message- From: squid-dev On Behalf Of Hideyuki Kawai Sent: Thursday, January 14, 2021 2:48 AM To: squid-dev@lists.squid-cache.org Subject: [squid-dev] effective acl for tcp_outgoing_address Hi, this is Kawai. Please let me send i

[squid-dev] effective acl for tcp_outgoing_address

2021-01-13 Thread Hideyuki Kawai
Hi, this is Kawai. Please let me send inquiry as followings. ### Requirement ### 1. Kerberos auth with Active Directory : auth_param . <- Success 2. "Security group" check which is gotten from AD : external_acl_type ...(using ext_kerberos_ldap_group_acl) <- success 3. Different