Re: [squid-users] squid authentication , ACL select from databse SQL , is that possible ?

2015-02-11 Thread squid-list
Hi, You can authenticate user and password from sql database using the helper squid_db_auth. But, allowing website for corresponding user by storing in db is not possible. You can use various ACLs to control the site access for the individual users. Instead of storing website in

Re: [squid-users] Calculate time spent on website (per ip address)

2015-02-11 Thread Leonardo Rodrigues
On 10/02/15 20:23, Yuri Voinov wrote: HTTP is stateless protocol (in most cases, excluding presistant connections). So, it is impossible to determine how much time user spent on site. Only very approximately. Right? in most cases, probably not even close to the real deal ! --

Re: [squid-users] Kerberos authentication problem - squid 3.4.11

2015-02-11 Thread Ludovit Koren
Markus Moeller hua...@moeller.plus.com writes: Hi Ludovit, Which Kerberos library version do you use ?Is it possible that the encryption types don't match ? I saw in your first email the following: It is standard Heimdal library on FreeBSD: # kinit --version kinit

[squid-users] Receiving blank input in External ACL

2015-02-11 Thread Alberto Perez
Hi to all and thanks for the time given to read and reply these emails I am having an strange issue with my external ACL, ocassionally im getting blank inputs from squid to by proccessed by the external ACL, for those cases I am returning ERR but squid is complainting showing in cache.log

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Amos Jeffries
On 12/02/2015 1:56 a.m., Yuri Voinov wrote: Natural selection usually takes the most stupid individuals in a population. Who am I to stop him? Electrical outlet, a knife and matches are dangerous. Should I keep repeating it, not to forget, and to inspire everyone around us? You still

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Amos Jeffries
On 12/02/2015 12:43 a.m., Yuri Voinov wrote: Thanks, Captain :))) Eliezer, we not so stupid. :) This is obvious for System Administrator, isn't it? Not everybody on this list is a professional. And its public, so random amateurs using their favourite search engine will

Re: [squid-users] benefits of usingext_kerberos_ldap_group_aclinstead of ext_ldap_group_acl

2015-02-11 Thread Markus Moeller
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/01/2015 11:31 p.m., Simon Stäheli wrote: Are there any other benefits in using ext_kerberos_ldap_group_acl instead of ext_ldap_group_acl except the Netbios name to Kerberos domain name” mappings provided by the -N option. As far as I can tell,

Re: [squid-users] Kerberos authentication problem - squid 3.4.11

2015-02-11 Thread Markus Moeller
Hi Ludovit, How did you create the keytab ? Usually there is an option allowing you to select the encryption type. The other place to check would be /etc/krb5.conf. It can contain a list of supported encryption types. See

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Brett Lymn
On Wed, Feb 11, 2015 at 04:17:48PM +0600, Yuri Voinov wrote: Fred, this is no matter. Millions of files can remove with one piped command: *find . |xargs rm That will work but rm will complain when find hands it the name of a directory. You can avoid that by: find . -type f | xargs rm

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Stefano Ansaloni
Here is the output of grep assert /var/log/squid/cache.log: 2015/02/11 08:33:49 kid1| assertion failed: store.cc:1887: isEmpty() 2015/02/11 09:38:05 kid1| assertion failed: store.cc:1887: isEmpty() 2015/02/11 09:41:48 kid1| assertion failed: store.cc:1887: isEmpty() 2015/02/11 09:41:53 kid1|

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Yuri Voinov
11.02.15 16:00, Stefano Ansaloni пишет: Sorry for the noob question: is there a special command to wipe the cache? Yes, rm -Rf * :) Or, unlink on ufs :) As I wrote in the first message, I upgraded from 3.4.10 to 3.5.1. They uses the same cache format.

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread FredB
Sorry for the noob question: is there a special command to wipe the cache? Depends, If your cache is not big a rm or mv is enough http://wiki.squid-cache.org/SquidFaq/OperatingSquid#I_want_to_restart_Squid_with_an_empty_cache Don't forget squid -z after As I wrote in the first message,

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread FredB
Stefano, Please can you try this grep assert /var/log/squid/cache.log after the blank page Regards, Fred http://numsys.eu http://e2guardian.org ___ squid-users mailing list squid-users@lists.squid-cache.org

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread FredB
Here is the output of grep assert /var/log/squid/cache.log: 2015/02/11 08:33:49 kid1| assertion failed: store.cc:1887: isEmpty() 2015/02/11 09:38:05 kid1| assertion failed: store.cc:1887: isEmpty() Ok it's what I think .. Please can you remove/format your cache a retry. This is a

[squid-users] Squid Memory Leak with certain FTP requests?

2015-02-11 Thread Silamael
Hi, One of our customers does constantly mirroring of some FTP directories and noticed a huge memory consumption of Squid. As far as I can see with squidclient mgr:mem, the 2K buffers are constantly increasing if Squid is processing FTP requests like wget ftp://some.server/pub/ or wget -m

Re: [squid-users] Squid Memory Leak with certain FTP requests?

2015-02-11 Thread Yuri Voinov
Squid first saves object in memory. Then swapout object to cache. As usual: # MEMORY CACHE OPTIONS # - # TAG: cache_mem(bytes) #NOTE: THIS PARAMETER DOES NOT SPECIFY THE MAXIMUM PROCESS SIZE. #IT ONLY

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Amos Jeffries
On 11/02/2015 11:05 p.m., Yuri Voinov wrote: 11.02.15 16:00, Stefano Ansaloni пишет: Sorry for the noob question: is there a special command to wipe the cache? Yes, rm -Rf * :) Or, unlink on ufs :) If you get this in time. I am looking for a copy of a swap.state file from a proxy which is

Re: [squid-users] Redirecting to DIRECT_CONNECT failed ssl-bump connections

2015-02-11 Thread Yuri Voinov
First of all, read this: http://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit Second - no way to find what site generates this error excluding user complains. WBR, Yuri. 11.02.15 11:25, Luis Miguel Silva пишет: Dear all, I'm seeing several error messages in my cache.log,

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Eliezer Croitoru
On 11/02/2015 12:17, Yuri Voinov wrote: Fred, this is no matter. Millions of files can remove with one piped command: *find . |xargs rm :) * And it should be used wisely! Any recommendation to run rm should take in account that the rm can in a way wipe out files which you might not

Re: [squid-users] Squid Memory Leak with certain FTP requests?

2015-02-11 Thread Silamael
On 02/11/2015 11:10 AM, Yuri Voinov wrote: Squid first saves object in memory. Then swapout object to cache. As usual: This is no memory leaking, but normal cache behaviour. As documented. You can play around with range_offset_limit and quick_abort_min parameters. Or try to no cache this

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Eliezer Croitoru
On 05/02/2015 11:17, FredB wrote: Squid Cache: Version 3.5.1-20150201-r13744 Service Name: squid configure options: '--build=x86_64-linux-gnu' '--prefix=/' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc'

Re: [squid-users] Problems with squid 3.5.1

2015-02-11 Thread Yuri Voinov
Thanks, Captain :))) Eliezer, we not so stupid. :) This is obvious for System Administrator, isn't it? 11.02.15 17:38, Eliezer Croitoru пишет: On 11/02/2015 12:17, Yuri Voinov wrote: Fred, this is no matter. Millions of files can remove with one piped command: *find . |xargs

Re: [squid-users] assertion failed: client_side.cc:1515: connIsUsable(http-getConn())

2015-02-11 Thread Eliezer Croitoru
Hey Dan, First I must admit that this squid.conf is quite complicated but kind of self explanatory. I have tried to understand the next lines: # File size (download) restrictions acl response_size_100 external response_size_type 100 192.168.0.10 http_access allow response_size_100

Re: [squid-users] Squid 3.5.1 NTLM and LDAP

2015-02-11 Thread Rich549
*Ok, I've made all of the advised changes and it still didn't work. I've just tried pasting my helper command into command prompt and it just seems to hang. I tried the following:* - D:\Squidd:/Squid/lib/squid/ext_ldap_group_acl.exe -d -S -b ou=Domain_Groups,dc=domain-uk,dc=com -f

[squid-users] A little help with squid and e-cap

2015-02-11 Thread Luis Miguel Silva
Dear all, This might not be the ideal place to ask questions about e-cap but, since e-cap's mailing list is not working, I decided to ask my question here. So, here goes: - *My ecap service only seems to work on some pages*... -- I've added the following configuration to my squid.conf: