Re: [squid-users] Suppressing authentication schemes

2020-10-20 Thread Alex Rousskov
On 10/20/20 10:44 AM, Philipp Gesang wrote: > On Tuesday, 2020-10-20 09:53:45 -0400 Alex Rousskov wrote >>> a while back we received a report from a customer that Windows >>> hosts will not fall back on conventional authentication >>> mechanisms if Squid advertises Negotiate. That is unfortunate

Re: [squid-users] Suppressing authentication schemes

2020-10-20 Thread Philipp Gesang
Hey Alex, On Tuesday, 2020-10-20 09:53:45 -0400 Alex Rousskov wrote > > a while back we received a report from a customer that Windows > > hosts will not fall back on conventional authentication > > mechanisms if Squid advertises Negotiate. That is unfortunate as > > not all systems in that

Re: [squid-users] Squid doesn't call helper

2020-10-20 Thread Kornexl, Anton
Thank you very much With the debug option i found the error An external acl program later in the config returned a number and OK in one line (5:OK or 10:ERR) The acl handler in squid got an exception handling this returned result and all requests got DENIED After correcting the external

Re: [squid-users] Suppressing authentication schemes

2020-10-20 Thread Alex Rousskov
On 10/20/20 8:41 AM, Philipp Gesang wrote: > a while back we received a report from a customer that Windows > hosts will not fall back on conventional authentication > mechanisms if Squid advertises Negotiate. That is unfortunate as > not all systems in that customer’s network are Kerberos

[squid-users] Suppressing authentication schemes

2020-10-20 Thread Philipp Gesang
Hi, a while back we received a report from a customer that Windows hosts will not fall back on conventional authentication mechanisms if Squid advertises Negotiate. That is unfortunate as not all systems in that customer’s network are Kerberos enabled; some of them should just continue using

Re: [squid-users] active directory 2008.

2020-10-20 Thread Amos Jeffries
On 21/10/20 1:24 am, Christophe Leloup wrote: > Hi, > > I have connected my debian to my active directory. I don't have machine > authentication by user but only by ip. attached my squid.conf. > > Have a read of this: Amos

Re: [squid-users] active directory 2008.

2020-10-20 Thread Amos Jeffries
On 21/10/20 1:24 am, Christophe Leloup wrote: > Hi, > > I have connected my debian to my active directory. I don't have machine > authentication by user but only by ip. attached my squid.conf. > Well. Yes, that looks true. Amos ___ squid-users

Re: [squid-users] active directory 2008.

2020-10-20 Thread Christophe Leloup
Hi,I have connected my debian to my active directory. I don't have machine authentication by user but only by ip. attached my squid.conf.thanks## LDAP & Kerberos (Active Directory) Authentication## Negociate kerberos and ntlm authenticationauth_param negotiate program

Re: [squid-users] sslbump https intercepted or tproxy

2020-10-20 Thread Amos Jeffries
On 20/10/20 4:39 am, Vieri wrote: > Hi, > > It's unclear to me if I can use TPROXY for HTTPS traffic. You can. It is just an alternative to NAT. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org

Re: [squid-users] active directory 2008.

2020-10-20 Thread Amos Jeffries
On 20/10/20 10:44 pm, Christophe Leloup wrote: > Good morning all, > > I am French. excuse me for my English. > I am looking for a tutorial. how integrated an active directory 2008 with > squid. > > do you have any leads or websites? > That depends on what you are trying to make Squid do,

Re: [squid-users] Squid doesn't call helper

2020-10-20 Thread Amos Jeffries
On 20/10/20 6:18 pm, Kornexl, Anton wrote: > Squid 4.10 on Ubuntu 20.04 > >   > > The configured program is started but not called (or the result not used) > Please check cache.log to find out which of those two very different things is happening. One means the ACL is not being checked or

[squid-users] active directory 2008.

2020-10-20 Thread Christophe Leloup
Good morning all, I am French. excuse me for my English. I am looking for a tutorial. how integrated an active directory 2008 with squid. do you have any leads or websites? thank you ___ squid-users mailing list squid-users@lists.squid-cache.org