[squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-09 Thread Markus Moeller
Hi Bilal, I create a new OU in Active Directory like OU=UnixPrincipals,DC=... I then create a Windows Group UnixAdministrators and add the Windows account of the UnixAdministrators to it. Finally I change the permissions on the OU=UnixPrincipals so that the members of the group

[squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
Hi Bilal, What you do is a possible option, but has in my view 3 problems. 1) In a large enterprise you really do not want additional user accounts without password expiry as you have to have a process in place to recertify them regularly 2) It means when the administrator leaves you have

[squid-users] Re: Does Squid support Winsock proxy

2010-04-09 Thread TONY FEI
Dear All, anyone can help answer my question kindly. Thanks! -- View this message in context: http://n4.nabble.com/Does-Squid-support-Winsock-proxy-tp1788864p1819045.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Re: Does Squid support Winsock proxy

2010-04-09 Thread Amos Jeffries
TONY FEI wrote: Dear All, anyone can help answer my question kindly. Thanks! If you mean does Squid use the winsock library the answer is: yes Squid works on windows. If you means does squid contain WinSOCKS support the answer is no, and we are not likely to be adding support for obsolete

Re: [squid-users] how to cache youtube

2010-04-09 Thread Richard Wall
On Fri, Apr 9, 2010 at 6:35 AM, Kinkie gkin...@gmail.com wrote: On Fri, Apr 9, 2010 at 12:32 AM, sameer khan khanza...@hotmail.com wrote: Please see http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube thanks kinkie, but does it work ? any one experience with below link ? will be

Re: [squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Nick Cairncross
Markus, I understand your advice but I wanted to clarify the last paragraph also. If I have already used Samba to join my machine to the domain and want to have the Samba service still running to permit shares for Squid administration and other things, do you mean use the msktutil tool to

Re: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Nick Cairncross
Ah, just seem this - apologies for my post. I think I understand this and will give it a go.. On 08/04/2010 20:08, Markus Moeller hua...@moeller.plus.com wrote: Hi Nick, Did you use samba to create the keytab. I have seen that if you use samba for more then squid (e.g. cifs, winbind, etc)

RE: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-09 Thread Henrik Nordström
tor 2010-04-08 klockan 17:41 -0500 skrev David Robinson: Which quite likely triggers confusion within Squid as the store/object interface is range aware. Has been issues there in the past, and quite likely is more issues.. Is squid 2.7 Content-Range aware? Since these requests work in

RE: [squid-users] how to cache youtube

2010-04-09 Thread sameer khan
hey i have tried implementing the as per the mentioned link, but it doesn't seems to be working as i am seeing flv getting released. @richard, are using the same config as per mentioned in below link ? thanks a million Date: Fri, 9 Apr 2010

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-09 Thread Henrik Nordström
fre 2010-04-09 klockan 09:54 +1000 skrev Mark Nottingham: The response to the request with the fs query arg is sending back a Content-Range header;

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-09 Thread Henrik Nordström
fre 2010-04-09 klockan 12:29 +1200 skrev Amos Jeffries: I though Squid considered it a malformed 206 and uncachabled it. It's not a 206 response. Not that it really differs a lot.. Does squid consider the reply a malformed 206 or a malformed 200? The extra bytes which exist in the body

[squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
Hi Bilal, Regarding your second point about workgroups the answer is that Kerberos can work too (with popup). But to make it work your DHCP server has to privode WINS servers (or it has to be hardcoded on the client). When a client gets the Negotiate request the client will try to find out

[squid-users] Re: Squid 2.7.8 + pfSense 'zero sized reply'

2010-04-09 Thread Luke Jaeger
Never mind, it fixed itself. It seems their server was broken yesterday. - Luke Jaeger | Technology Coordinator Pioneer Valley Performing Arts Charter Public School -- View this message in context: http://n4.nabble.com/Squid-2-7-8-pfSense-zero-sized-reply-tp1778352p1819193.html Sent from

Re: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Nick Cairncross
Markus, I've had a go with mskstutil and it appeared to work partially once - the comptuer account was created and the spn/upn were set, but no Keytab was generated.. I then tried again having deleted the squid-http computer account but receive the following errors - see below, at the end.

[squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
I haven't seen this error before. Is your AD 2008 ? Has the schema been changed ? These are the only attributes used by msktutil and are the default ones UserPrincipalName; DnsHostName; Description; ManagedBy; OperatingSystem; ObjectClass; CN; UserAccountControl; SamAccountName;

[squid-users] Squid can't access all links

2010-04-09 Thread a...@gmail
Hi All, I was wondering if anyone has any suggestions on how to solve this issue. here it is let's say I try and access http://mysite.com/folder/ it works fine right? but if I try and access for instance http://mysite.com/folder/admin_login.php it doesn't How is it possible for squid to

RE: [squid-users] Logging failed authentication requests

2010-04-09 Thread Mellem, Dan
-Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Wednesday, April 07, 2010 10:56 PM Mellem, Dan wrote: Hi, Thanks for your response. Please see below. From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Wednesday, April 07, 2010 7:33 PM On Wed, 07

Re: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Henrik Nordström
fre 2010-04-09 klockan 12:12 +0100 skrev Markus Moeller: Regarding your second point about workgroups the answer is that Kerberos can work too (with popup). But to make it work your DHCP server has to privode WINS servers (or it has to be hardcoded on the client). When a client gets the

[squid-users] Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
Henrik Nordström hen...@henriknordstrom.net wrote in message news:1270839045.2636.1.ca...@localhost.localdomain... fre 2010-04-09 klockan 12:12 +0100 skrev Markus Moeller: Regarding your second point about workgroups the answer is that Kerberos can work too (with popup). But to make it

[squid-users] Re: Re: Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-09 Thread Markus Moeller
Henrik Nordström hen...@henriknordstrom.net wrote in message news:1270841477.3195.4.ca...@localhost.localdomain... fre 2010-04-09 klockan 20:20 +0100 skrev Markus Moeller: I wasn't sure but I tested and that was my observation. And you are sure it was not looking for an NT Domain? (NTLM)

Re: [squid-users] Squid can't access all links

2010-04-09 Thread Amos Jeffries
a...@gmail wrote: Hi All, I was wondering if anyone has any suggestions on how to solve this issue. here it is let's say I try and access http://mysite.com/folder/ it works fine right? but if I try and access for instance http://mysite.com/folder/admin_login.php it doesn't How is it possible