Re: [squid-users] select parent proxy based on ACL

2016-04-05 Thread Pascal Watteel
anyone? On Tue, 2016-04-05 at 12:08 +, Pascal Watteel wrote: > Hi peeps, > > I have written a python based download accelerator based proxy. > It does exactly the same thing as what aria2c would do, but as a > proxy. > > I now want to tell squid to only send .zip .iso .whatever to this >

[squid-users] Sending intermediate certificate with SSL-Bumped Certificate. (V3.5.1516-3-2-r14000)

2016-04-05 Thread Nicolaas Hyatt
I know I'm a few minor revisions behind, but I am a little confused as to if it is possible to request squid include the configured certificate along with the certificate generated. I know that this is somewhat confusing to read. +Root (Self Signed) CA Cert | `+ Intermediate Certificate (Used

Re: [squid-users] External ACL Lookup

2016-04-05 Thread Rafael Akchurin
Well I would then first run the request with ldp.exe just to be sure the user is indeed in the group In our ICAP we use a little different filter - may be it can give you some ideas :( Please note I do not know squid equivalents for {{ bla-bla }} macros.

Re: [squid-users] External ACL Lookup

2016-04-05 Thread Craddock, Tommy
Rafael, Thanks for your reply. Substituting userPrincipalName for sAMAccountName in both the command line and squid.conf produces an ERR: /usr/lib64/squid/squid_ldap_group -R -K -S -b "dc=example,dc=com" -D sq...@example.com -W /etc/squid/password -f

Re: [squid-users] External ACL Lookup

2016-04-05 Thread Rafael Akchurin
Hello Tommy, Just my two cents. Try using usePrincipalName, and not sAMAccountName in LDAP filter. The squid logs indicate the user is authenticated as tcradd...@example.com which is *not* in sAMAccountName for sure. Best regards, Rafael Akchurin Diladele B.V.

[squid-users] External ACL Lookup

2016-04-05 Thread Craddock, Tommy
Hello, Trying to use an external ACL helper to do a lookup of my user in a group in a Windows AD. I can test from the command line: /usr/lib64/squid/squid_ldap_group -R -K -S -b "dc=example,dc=com" -D sq...@example.com -W /etc/squid/password -f

Re: [squid-users] how to use squid as a tcp forward proxy?

2016-04-05 Thread Alex Rousskov
On 04/05/2016 01:50 AM, phafer wrote: > how can I extend squid to process/modify payload of my private > application protocol basing on TCP? You probably should not -- Squid is not designed to be a TCP proxy and there ought to be better/true TCP proxies out there. > Client->squid->my squid

Re: [squid-users] filtering http(s) sites, transparently

2016-04-05 Thread Jok Thuau
On Mon, Apr 4, 2016 at 6:23 PM, Amos Jeffries wrote: > >>> > >>> If i remove *all* the http_access lines, then the behavior appears > >> correct > >>> (from a "splicing/bumping" standpoint). > >>> > >> > >> Strange. Squid without any http_access lines should be denying

Re: [squid-users] Kerberos authentication only working with 1 domain server

2016-04-05 Thread Drikus Brits
i believe i might have fixed it will advise soonest. On 2016-04-05 16:01, Drikus Brits wrote: > Extra info : > > root@mw-sqproxy-test:/home/geosupport# uname -a > Linux mw-sqproxy-test 3.19.0-25-generic #26~14.04.1-Ubuntu SMP Fri Jul 24 > 21:16:20 UTC 2015 x86_64 x86_64 x86_64

Re: [squid-users] Kerberos authentication only working with 1 domain server

2016-04-05 Thread Drikus Brits
Extra info : root@mw-sqproxy-test:/home/geosupport# uname -a Linux mw-sqproxy-test 3.19.0-25-generic #26~14.04.1-Ubuntu SMP Fri Jul 24 21:16:20 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux root@mw-sqproxy-test:/home/geosupport# squid3 -v Squid Cache: Version 3.3.8 Ubuntu configure options:

[squid-users] Kerberos authentication only working with 1 domain server

2016-04-05 Thread Drikus Brits
Hi Experts, After much struggling it seems i've reached some point of success but yet still not. I've checked a multitude of websites for help before coming here, but didn't get anything valuable yet. My problem as follows : I have 1x win2008R2 server that works with kerberos

[squid-users] select parent proxy based on ACL

2016-04-05 Thread Pascal Watteel
Hi peeps, I have written a python based download accelerator based proxy. It does exactly the same thing as what aria2c would do, but as a proxy. I now want to tell squid to only send .zip .iso .whatever to this proxy as an parent proxy. But i only find a way how to tell squid to do this for

[squid-users] squid ftp-proxy

2016-04-05 Thread Axel.Eberhardt
Hello, Maybe someone can give me a hint :-) I try to enable the Native ftp proxying. The documentation I have found is: http://wiki.squid-cache.org/Features/FtpRelay But there is no example for this. Also in the Mail Archives I was not able to find a hint. I have configured the ftp proxy with

[squid-users] how to use squid as a tcp forward proxy?

2016-04-05 Thread phafer
hi, how can I extend squid to process/modify payload of my private application protocol basing on TCP? Client->squid->my squid plugin which is used to process/modify payload of tcp traffic->Server BR, Bin___ squid-users mailing list

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

2016-04-05 Thread FredB
Hi Amos, I confirm, cleaning the cache (mkfs in my case) do not fix the issue Fred ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users