Re: [squid-users] Re: Re: Re: Re: Advices for a squid cluster with kerberos auth

2010-06-28 Thread Emmanuel Lesouef
Works really great now. I didn't understand the -s option was for squid_kerb_auth. Maybe I should read README.squid_kerb_auth.gz more carefully. Thanks very much. Le Fri, 25 Jun 2010 18:53:20 +0100, Markus Moeller hua...@moeller.plus.com a écrit : Sorry I didn't mean for msktutil, but as a

[squid-users] squid + antivirus

2010-06-28 Thread Philippe Dhont
Hello, I am looking for the easiest configuration to use squid in combination with an antivirus. Thanks, Ph.

RE: [squid-users] Re: Re: Re: Re: Advices for a squid cluster with kerberos auth

2010-06-28 Thread Chis (Ian Chisholm)
Sent from my Windows Mobile® phone. -Original Message- From: Emmanuel Lesouef e.leso...@crbn.fr Sent: 28 June 2010 09:00 To: squid-users@squid-cache.org squid-users@squid-cache.org Subject: Re: [squid-users] Re: Re: Re: Re: Advices for a squid cluster with kerberos auth Works really

Re: [squid-users] squid_kerb_auth (parseNegTokenInit failed with rc=102)

2010-06-28 Thread Emmanuel Lesouef
Hi, I think you might be interested by this thread : http://www.squid-cache.org/mail-archive/squid-users/201006/0128.html Le Mon, 28 Jun 2010 07:57:38 +, GIGO . gi...@msn.com a écrit : Hi all, I am unable to do kerberos authentication in my live enviroment as appose to the test

Re: [squid-users] squid + antivirus

2010-06-28 Thread Matus UHLAR - fantomas
On 28.06.10 10:07, Philippe Dhont wrote: I am looking for the easiest configuration to use squid in combination with an antivirus. try ICAP -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na

[squid-users] msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

2010-06-28 Thread Tom Tux
Hi I'm trying to generate a computer-account with msktutil: I got the following error: ... ... - ldap_connect: Connecting to LDAP server: dc1.domain.com try_tls=YES SASL/GSSAPI authentication started SASL username: ad...@domain.com SASL SSF: 0 Error: ldap_set_option (option=) failed (Can't

Re: [squid-users] msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

2010-06-28 Thread Nick Cairncross
Missing ldap libraries maybe? On 28/06/2010 12:32, Tom Tux tomtu...@gmail.com wrote: Hi I'm trying to generate a computer-account with msktutil: I got the following error: ... ... - ldap_connect: Connecting to LDAP server: dc1.domain.com try_tls=YES SASL/GSSAPI authentication started SASL

Re: [squid-users] msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

2010-06-28 Thread Tom Tux
which ldap-libraries should be installed? The following devel-packages are installed (SLES11-System): - openldap2-devel - cyrus-sasl-devel 2010/6/28 Nick Cairncross nick.cairncr...@condenast.co.uk: Missing ldap libraries maybe? On 28/06/2010 12:32, Tom Tux tomtu...@gmail.com wrote: Hi

Re: [squid-users] msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

2010-06-28 Thread Tom Tux
this works. I'm also able to telnet with tcp 636 (ldaps). I'm just searching for a solution to kerberise squid without the need of winbind/smb. 2010/6/28 Nick Cairncross nick.cairncr...@condenast.co.uk: They seem ok. Telnet to your dc on 389? On 28/06/2010 14:40, Tom Tux

Re: [squid-users] squid + antivirus

2010-06-28 Thread Henrik Nordström
mån 2010-06-28 klockan 11:27 +0200 skrev Matus UHLAR - fantomas: On 28.06.10 10:07, Philippe Dhont wrote: I am looking for the easiest configuration to use squid in combination with an antivirus. try ICAP http://c-icap.sourceforge.net/ + http://clamav.ne/

Re: [squid-users] squid_kerb_auth (parseNegTokenInit failed with rc=102)

2010-06-28 Thread Henrik Nordström
mån 2010-06-28 klockan 07:57 + skrev GIGO .: I am unable to do kerberos authentication in my live enviroment as appose to the test enviroment where it was successful. My environment is Active Direcory Single Forest Multidomain with each domain having multiple domain controllers. Make

[squid-users] Acceptable Service Times?

2010-06-28 Thread Baird, Josh
Hi, I have a pair of forward proxy's (Squid 2.6STABLE 21/EL5 averaging about 500-600requests per minute currently. All caching has been disabled. Some users are reporting high latency and slow browsing. Below is a snapshot of stats from Squid. Could someone tell me if anything stands out that

Re: [squid-users] squid + antivirus

2010-06-28 Thread Seann
Henrik Nordström wrote: mån 2010-06-28 klockan 11:27 +0200 skrev Matus UHLAR - fantomas: On 28.06.10 10:07, Philippe Dhont wrote: I am looking for the easiest configuration to use squid in combination with an antivirus. try ICAP http://c-icap.sourceforge.net/ +

Re: [squid-users] Acceptable Service Times?

2010-06-28 Thread Amos Jeffries
On Mon, 28 Jun 2010 15:09:53 -0500, Baird, Josh jba...@follett.com wrote: Hi, I have a pair of forward proxy's (Squid 2.6STABLE 21/EL5 averaging about 500-600requests per minute currently. All caching has been disabled. Some users are reporting high latency and slow browsing. Below is a

Re: [squid-users] Acceptable Service Times?

2010-06-28 Thread Luis Daniel Lucio Quiroz
Le lundi 28 juin 2010 15:09:53, Baird, Josh a écrit : Hi, I have a pair of forward proxy's (Squid 2.6STABLE 21/EL5 averaging about 500-600requests per minute currently. All caching has been disabled. Some users are reporting high latency and slow browsing. Below is a snapshot of stats

Re: [squid-users] squid + antivirus

2010-06-28 Thread Amos Jeffries
On Mon, 28 Jun 2010 15:15:30 -0500, Seann nombran...@tsukinokage.net wrote: Henrik Nordström wrote: mån 2010-06-28 klockan 11:27 +0200 skrev Matus UHLAR - fantomas: On 28.06.10 10:07, Philippe Dhont wrote: I am looking for the easiest configuration to use squid in combination with

[squid-users] Re: squid_kerb_auth (parseNegTokenInit failed with rc=102)

2010-06-28 Thread Markus Moeller
Make sure the squid servers hostname matches squidhr1.v.local. If not use -s HTTP/squidhr1.v.local as an option to squid_kerb_auth. Regards Markus GIGO . gi...@msn.com wrote in message news:snt134-w64257c53609757cd3cf006b9...@phx.gbl... Hi all, I am unable to do kerberos authentication in

[squid-users] Re: msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

2010-06-28 Thread Markus Moeller
Can you post the whole output of msktutil with --verbose please. If msktutil fails with TLS on port 389 it will try again without TLS. Regards Markus Tom Tux tomtu...@gmail.com wrote in message news:aanlktil1fhq5ks3nx8mostkic2qoacz1xpmp6wh6r...@mail.gmail.com... this works. I'm also able to

Re: [squid-users] Re: msktutil: Error: ldap_set_option (option=) failed (Can't contact LDAP server)

2010-06-28 Thread Tom Tux
Hi Markus Here is the output: -- snip --- proxy-test-01:/usr/local/mskutil-0.4/sbin # ./msktutil -c -s HTTP/proxy-test-01.xx.yy -h proxy-test-01 -k /etc/krb5.keytab --computer-name proxy-test-01 --upn HTTP/proxy-test-01.xx.yy --server dc1.xx.yy --verbose --