Re: [squid-users] ssl proxy error: No valid signing SSL certificate configured for https_port [::]:3127

2015-02-16 Thread Alan Palmer
Tried the two links provided, still no luck. details: squid -v Squid Cache: Version 3.4.11 configure options: '--disable-strict-error-checking' '--disable-arch-native' '--enable-shared' '--datadir=/usr/local/share/squid' '--libexecdir=/usr/local/libexec/squid' '--disable-loadable-modules'

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yes. root @ cthulhu / # uname -a SunOS cthulhu 5.10 Generic_150401-16 i86pc i386 i86pc Solaris Are you an expert in it? 16.02.15 22:35, Antony Stone пишет: On Monday 16 Feb 2015 at 16:20, Yuri Voinov wrote: root @ cthulhu / # ps axuf usage: ps

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just look at this: http://i.imgur.com/fFRW3Hv.png Now i've tried to toggle 'I' on top. To show idle processes. Did you seen? 16.02.15 22:48, Eliezer Croitoru пишет: Hey Yuri, I would try first ps -aux just to find out if this is the right way

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Antony Stone
On Monday 16 Feb 2015 at 16:20, Yuri Voinov wrote: root @ cthulhu / # ps axuf usage: ps [ -aAdeflcjLPyZ ] [ -o format ] [ -t termlist ] [ -u userlist ] [ -U userlist ] [ -G grouplist ] [ -p proclist ] [ -g pgrplist ] [ -s sidlist ] [ -z zonelist ] May be, you want to know my

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 root @ cthulhu / # ps axuf usage: ps [ -aAdeflcjLPyZ ] [ -o format ] [ -t termlist ] [ -u userlist ] [ -U userlist ] [ -G grouplist ] [ -p proclist ] [ -g pgrplist ] [ -s sidlist ] [ -z zonelist ] 'format' is one or more of:

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 root @ cthulhu / # ps -aux ps: unknown user x Really, I don't understand subject of discussion. I think, will good to have possibility to autoclose idle Squid redirectors after time specified. Regardless of the operating system. Like autoclose

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think, this looks like platform-specific bug. Yes, sir. AFAIK, Solaris idle processes almost never has state 'Idle', but 'Sleep', so this is why Squid doesn't shutting down idle redirectors. Amos, is this explanation possible? 16.02.15 22:48,

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
Hey Yuri, I would try first ps -aux just to find out if this is the right way to use ps in solaris. If it works show me the details first and we will see what to do next. Eliezer On 16/02/2015 18:37, Yuri Voinov wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yes. root @ cthulhu /

Re: [squid-users] login expired

2015-02-16 Thread Ignazio Raia
Hi Amos I finally made the changes you suggested and now I have squid asks authentication as required. I still have two troubles: 1) the directive auth_param basic credentialsttl 60 seconds doesn't work. Squid doesn't ask me a new login request 2) If I use Internet Explorer I don't have the login

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
On 16/02/2015 17:27, Yuri Voinov wrote: root @ cthulhu / # top -n 1 -b last pid: 43244; load avg: 0.06, 0.07, 0.07; up 7+22:16:44 21:27:15 62 processes: 61 sleeping, 1 on cpu CPU states: 99.3% idle, 0.5% user, 0.2% kernel, 0.0% iowait, 0.0% swap Kernel: 510 ctxsw, 4 trap, 754 intr,

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We are talking not about the differences between any *NIX-based or *NIX-like OS. Android just an example. I guess an observerd behaviour of redirector's processes is not expected. Now I've observed mentioned behaviour of redirectors over one month. I

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 root @ cthulhu / # ps -efl|grep squidGuard|grep -v grep|awk {'print $2 $5'} S 6475 Now you can see one squidGuard process. Squid was restarted hour ago. Process is idle (no traffic now), but this is as desired by config. As you can see, it state

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Now: 2015/02/16 23:10:23 kid1| store_swap_size = 29826351.50 KB 2015/02/16 23:10:24 kid1| storeLateRelease: released 0 objects 2015/02/16 23:15:01 kid1| Starting new redirector helpers... 2015/02/16 23:15:01 kid1| helperOpenServers: Starting 1/100

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
On 16/02/2015 21:10, Yuri Voinov wrote: root @ cthulhu / # ps -e Yuri, Can you find the right ps command that will include user and memory usage by each process? Thanks, Eliezer ___ squid-users mailing list squid-users@lists.squid-cache.org

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
Hey Yuri, I looked eventually at Solaris 11 man pages at: http://docs.oracle.com/cd/E26502_01/html/E29030/ps-1.html#scrolltoc Just to be sure the next command would run: ps -e There is no subject to the discussion yet since the issue is yet to be defined as an issue. You mentioned Android

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
Hey Yuri, You missed the whole point. I didn't wanted you to grep any output. I wanted to see the whole server process list as a whole to understand the issue you see. If you see the server only with grep you might missing something since I have yet to see your server do any swap what so ever

Re: [squid-users] reverse-proxy with client certificates pass-thru

2015-02-16 Thread Jason Haar
On 17/02/15 11:34, Amos Jeffries wrote: There is splice mode in 3.5. Which is to say dont bump that traffic. If you have a reverse-proxy between a client and backend server and the backend server insists on seeing the client cert, then I think at best squid is simply a tcp forwarder (ie splice

[squid-users] OOKLA speedtest can't upload with squid

2015-02-16 Thread Alfredo Rezinovsky
I'm using a custom compiled version Squid Cache: Version 3.5.1-20150206-r13746 Service Name: squid configure options: '--disable-auth' '--disable-auto-locale' '--disable-cache-digests' '--disable-cpu-profiling' '--disable-debug-cbdata' '--disable-delay-pools' '--disable-devpoll' '--disable-ecap'

Re: [squid-users] ssl proxy error: No valid signing SSL certificate configured for https_port [::]:3127

2015-02-16 Thread Amos Jeffries
On 17/02/2015 5:16 a.m., Alan Palmer wrote: Tried the two links provided, still no luck. details: squid -v Squid Cache: Version 3.4.11 configure options: '--disable-strict-error-checking' '--disable-arch-native' '--enable-shared' '--datadir=/usr/local/share/squid'

Re: [squid-users] Error when using peek/splice/terminate with Squid 3.5.1

2015-02-16 Thread Amos Jeffries
On 16/02/2015 6:54 p.m., John Killimangalam Jacob wrote: Hi All, I am trying to configure an intercept proxy with peek/splice/terminate features in Squid 3.5.1 on CentOS 7 - 64 bit. I wanted to peak at steps 1 and step 2 and to decide on terminate on step 3 based on the SNI and server

Re: [squid-users] reverse-proxy with client certificates pass-thru

2015-02-16 Thread Amos Jeffries
On 17/02/2015 3:16 a.m., Martin Fuchs wrote: Hi ! I'm looking for a possibility to tell squid to pass a certificate presented by the client to a cache peer. Since i did not find anything, i decided to ask here ;-) I saw that it's possibe to let squid pass a client crtificate tot he

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/02/2015 4:27 a.m., Yuri Voinov wrote: Yep. 16.02.15 20:58, Eliezer Croitoru пишет: On 16/02/2015 15:23, Yuri Voinov wrote: http://i58.tinypic.com/rsqwxh.png 0 shutting down. Always. During nights and weekends. Um, how often do you

Re: [squid-users] cache peer load balancing round robin problem

2015-02-16 Thread Amos Jeffries
On 17/02/2015 4:13 a.m., Eliezer Croitoru wrote: Hey, There are couple things to consider while using multiple IPs for the same network\user. It is possible to do what you want in the OS level and in a way using squid. You should consider first what is the exact effect you want\need and if

[squid-users] can squid handle indirect request from clients ?

2015-02-16 Thread snakeeyes
Hi Guys, I wanted to ask . If I have as topology below : Client(HAPRoxy or redirector )==squid with ACLs basic ncsa authentication The client when it ask google.com It will passs thorugh the HAproxy , and it will direct the request to the squid Example = Client go to

Re: [squid-users] can squid handle indirect request from clients ?

2015-02-16 Thread Eliezer Croitoru
Hey, Squid and any other HTTP proxy cannot support basic authentication when it is being used as an intercept proxy. The only options to do such a thing is to use some kind of a captive portal or an external network system which will identify the user directly in a webserver or another way

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Amos Jeffries
On 17/02/2015 1:30 p.m., Eliezer Croitoru wrote: Hey Marcus, Great to hear about it!! I must say that the mentioned issues are the killers for squidGuard usage in many systems. Yeah and one of the many reasons its effectively a dead project now. IIRC, Shalla were going to maintain SG for

Re: [squid-users] cache peer load balancing round robin problem

2015-02-16 Thread Antony Stone
On Monday 16 Feb 2015 at 22:54, snakeeyes wrote: Hi , I have many account from same provider and I would like to use those accounts as round robin and each request has different IP as possible How many client machines are you trying to distribute in this way? Your example suggests you're

[squid-users] reverse-proxy with client certificates pass-thru

2015-02-16 Thread Martin Fuchs
Hi ! I'm looking for a possibility to tell squid to pass a certificate presented by the client to a cache peer. Since i did not find anything, i decided to ask here ;-) I saw that it's possibe to let squid pass a client crtificate tot he cache peer, but this would not work for out purposes.

Re: [squid-users] EXT_LOG not getting passed to http_reply_access acls

2015-02-16 Thread Amos Jeffries
On 10/02/2015 6:55 p.m., Cameron Charles wrote: Our setup contains a bunch of, mostly external, acls some http_access followed by some http_reply_access, these acls use EXT_LOG frequently, however we are having issues at the point of the last http_access and first http_reply_access acls (both

Re: [squid-users] cache peer load balancing round robin problem

2015-02-16 Thread snakeeyes
Hi , a All I need I need to load balance my request as I can So , I want if I go 1st time to == whatismyipaddfress.com I want to be ip1 2nd time ==ip2 3rd time== ip3 And so on Do u think my config needs to be modified ? cheers -Original Message- From: squid-users

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
Hey Yuri, There are couple sides and side-effects to the issue you describe. If it's OK with you I will for a sec look aside squid and the helpers code to another issue in Computer Science. Let say we are running some server\software which it's purpose is to calculate the distance from point

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
root @ cthulhu / # top -n1 -b top: illegal option -- 1 Top version 3.7 Usage: top [-ISTabcinqu] [-d x] [-s x] [-o field] [-U username] [number] root @ cthulhu / # top -n -b last pid: 7353; load avg: 0.16, 0.14, 0.13; up 7+20:05:37 19:16:08 72 processes: 71 sleeping, 1 on cpu CPU

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
http://i58.tinypic.com/rsqwxh.png 0 shutting down. Always. During nights and weekends. 16.02.15 19:13, Eliezer Croitoru пишет: Hey Yuri, There are couple sides and side-effects to the issue you describe. If it's OK with you I will for a sec look aside squid and the helpers code to another

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
Hey Yuri, OK I have seen something... Now we might need also the virtual memory which might be vsz. And the cachemgr output is not from squidview.. The last image I have seen from cachemgr was much helpful(with 10 helpers). From what I have seen until now squidGuard uses about 13 MB of ram

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Eliezer Croitoru
On 16/02/2015 15:23, Yuri Voinov wrote: http://i58.tinypic.com/rsqwxh.png 0 shutting down. Always. During nights and weekends. Are you talking about these 10? I am unsure I understand the issue yet..(I need to understand a bit more), is this the situation which stays forever? Eliezer

Re: [squid-users] cache peer load balancing round robin problem

2015-02-16 Thread Eliezer Croitoru
Hey, There are couple things to consider while using multiple IPs for the same network\user. It is possible to do what you want in the OS level and in a way using squid. You should consider first what is the exact effect you want\need and if it can meet reality in usability level. It is not

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 root @ cthulhu / # top -n 1 -b last pid: 43244; load avg: 0.06, 0.07, 0.07; up 7+22:16:44 21:27:15 62 processes: 61 sleeping, 1 on cpu CPU states: 99.3% idle, 0.5% user, 0.2% kernel, 0.0% iowait, 0.0% swap Kernel: 510 ctxsw, 4 trap, 754

Re: [squid-users] Is Squid can shutdown unused idle redirector's children?

2015-02-16 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yep. 16.02.15 20:58, Eliezer Croitoru пишет: On 16/02/2015 15:23, Yuri Voinov wrote: http://i58.tinypic.com/rsqwxh.png 0 shutting down. Always. During nights and weekends. Are you talking about these 10? I am unsure I understand the issue

Re: [squid-users] Squid Memory Leak with certain FTP requests?

2015-02-16 Thread Silamael
On 02/12/2015 09:51 AM, Amos Jeffries wrote: On 12/02/2015 9:03 p.m., Silamael Darkomen wrote: I will file a proper bug report with debug output and such when I'm back at work next monday. Any idea what's wrong here? For me it seems that the index.html Squid is generating for FTP requests

Re: [squid-users] benefits ofusingext_kerberos_ldap_group_aclinstead of ext_ldap_group_acl

2015-02-16 Thread Simon Stäheli
On 14.02.2015, at 15:43, Markus Moeller hua...@moeller.plus.com wrote: On 12.02.2015, at 17:58, Amos Jeffries squ...@treenet.co.nz wrote: On 13/02/2015 5:41 a.m., Simon Stäheli wrote: hmh, HAVE_KRB5 seems not to be set in include/autoconf.h What is the correct way to provide squid