Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Amos Jeffries
On 10/08/2012 1:55 a.m., Dan Charlesworth wrote: Hi Apparently I'm having the exact same issue as Michael was in this thread: http://www.squid-cache.org/mail-archive/squid-users/201204/0016.html Differences are: - I'm using 3.1.20 - I'm using CentOS 6.3 with openssl-1.0.0-20 - I'm building an

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Amos Jeffries
On 10/08/2012 7:36 a.m., Davide Alberani wrote: On Thu, Aug 9, 2012 at 1:16 AM, Amos Jeffries squ...@treenet.co.nz wrote: I'm trying squid 3.2 (since I'll need some of the new features), but I'm having troubles using it in intercept mode, when used along with an upstream proxy. Which 3.2

Re: [squid-users] squid 3.2.0.19 compilation problem

2012-08-10 Thread nipun_mlist Assam
It looks like somebody has patched your particular library 1.0.0 beta3 to back-port something? No idea if somebody patched openssl. My system is CentOS Linux release 6.0. Also, I guess the compilation error invalid conversion from ‘void*’ to ‘const _STACK* will be thrown by higher version of

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread nipun_mlist Assam
certificate_db.cc: In member function 'bool Ssl::CertificateDb::deleteInvalidCertificate()': certificate_db.cc:441: error: cannot convert 'stack_st_OPENSSL_PSTRING*' to 'const _STACK*' for argument '1' to 'int sk_num(const _STACK*)' certificate_db.cc:442: error: cannot convert

[squid-users] Re: squid_kerb_auth High CPU load.

2012-08-10 Thread Viorel Robu
Hooray!!! I solved my problem with squid_kerb_auth!!! The problem was not in architecture, as I wrongly supposed. The problem is SELINUX, even in permissive mode it make a big CPU pressure.

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Dan Charlesworth
Thanks Nipun. A patch is going to be a much better option for me given the difficulty of dealing with building RPMs and mock environments etc. I understand part 2 of your suggestions but I'm unsure how to find out what my abl version is if I run openssl version I get the following output:

[squid-users] Re: squid_kerb_auth High CPU load.

2012-08-10 Thread Markus Moeller
Good news. Thank you for sharing. Markus Viorel Robu viorelr...@yahoo.com wrote in message news:loom.20120810t112710-...@post.gmane.org... Hooray!!! I solved my problem with squid_kerb_auth!!! The problem was not in architecture, as I wrongly supposed. The problem is SELINUX, even in

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread nipun_mlist Assam
ABI version is defined in opensslv.h. Something like #define OPENSSL_VERSION_NUMBER 0x1003L Generally openssl header files install in /usr/include/openssl/ Regards, Nipun On Fri, Aug 10, 2012 at 3:44 PM, Dan Charlesworth d...@getbusi.com wrote: Thanks Nipun. A patch is going to

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Eliezer Croitoru
On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14-3.2.0.18 have a standing block preventing requests with conflicting destination IP and destination domain name being passed to peers. Release

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Dan Charlesworth
Thanks again. Turns out what you pasted is the same ABI my CentOS 6.3 = environment. I made a patch (attached) based on your suggestions but the build is = failing on the following errors: certificate_db.cc: In member function 'bool = Ssl::CertificateDb::deleteInvalidCertificate()':

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Amos Jeffries
On 10/08/2012 10:54 p.m., Eliezer Croitoru wrote: On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14-3.2.0.18 have a standing block preventing requests with conflicting destination IP and

Re: [squid-users] squid_ldap_group (Group into Group)

2012-08-10 Thread Rickifer Barros
Hi Eugene, yes, that's true, but this only works together the program squid_kerb_auth. So this require my computer inside a domain. I need that it works with a popup to type username and password. I tried: - to use squid_kerb_auth with the parameter auth_param basic program (DOESN'T WORK) - to

[squid-users] Re: squid_ldap_group (Group into Group)

2012-08-10 Thread Markus Moeller
Hi Rickifer, squid_kerb_ldap does not require squid_kerb_auth. You can use command line options for ldap and a default realm. ext_kerberos_ldap_group_acl [-h] [-d] [-i] [-s] [-a] [-D Realm ] [-N Netbios-Realm-List] [-m Max-Depth] [-u Ldap-User] [-p Ldap-Password] [-b Ldap-Bind-Path] [-l

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread nipun_mlist Assam
I made a patch (attached) based on your suggestions but the build is = failing on the following errors: certificate_db.cc: In member function 'bool = Ssl::CertificateDb::deleteInvalidCertificate()': certificate_db.cc:439: error: invalid conversion from 'void*' to 'const = _STACK*'

Re: [squid-users] squid_ldap_group (Group into Group)

2012-08-10 Thread Amos Jeffries
On 10/08/2012 11:55 p.m., Rickifer Barros wrote: Hi Eugene, yes, that's true, but this only works together the program squid_kerb_auth. So this require my computer inside a domain. I need that it works with a popup to type username and password. I tried: - to use squid_kerb_auth with the

Re: [squid-users] errors when building with ssl-crtd for CentOS 6

2012-08-10 Thread Dan Charlesworth
I'm using 3.1.20 but I figured out where my patch was wrong from your example. All working now! Thanks again for your help. Cheers Dan On 10/08/2012, at 10:11 PM, nipun_mlist Assam nipunml...@gmail.com wrote: I made a patch (attached) based on your suggestions but the build is = failing on

Re: [squid-users] squid_ldap_group (Group into Group)

2012-08-10 Thread Rickifer Barros
It Worked!!! Thank you Guys for all your tips... I got this with the command lines: FOR AUTHENTICATION: auth_param basic program /usr/lib/squid3/squid_ldap_auth -R -b dc=domain,dc=yyy -D cn=user,ou=example,dc=domain,dc=yyy -w

[squid-users] 100% CPU

2012-08-10 Thread Hank Disuko
Hi folks, I'm using: Squid Cache version 3.0.STABLE13 for i686-suse-linux This cache has been running well for at least a couple years, or more. As of yesterday, my squid process started using 100% CPU and users on the proxy are experiencing extremely slow Internet speeds. I've disabled

[squid-users] squidguard not blocking

2012-08-10 Thread J Webster
squidguard correctly blocks when I run from the command line: [root squidguard]# echo http://www.porn.com/ - - GET | squidGuard -c /etc/squid/squidguard.conf -d 2012-08-10 17:45:22 [28923] New setting: dbhome: /var/lib/squidguard 2012-08-10 17:45:22 [28923] New setting: logdir:

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Eliezer Croitoru
On 8/10/2012 9:34 PM, J Webster wrote: squidguard correctly blocks when I run from the command line: [root squidguard]# echo http://www.porn.com/ - - GET | squidGuard -c /etc/squid/squidguard.conf -d SNIP Does the url rewriter need to be further up the squid.conf? It is right at the end of

Re: [squid-users] squid 3.2 intercept and upstream proxy not working

2012-08-10 Thread Eliezer Croitoru
On 8/10/2012 2:32 PM, Amos Jeffries wrote: On 10/08/2012 10:54 p.m., Eliezer Croitoru wrote: On 8/9/2012 4:47 AM, Amos Jeffries wrote: On 09.08.2012 12:32, Eliezer Croitoru wrote: On 8/9/2012 2:16 AM, Amos Jeffries wrote: Releases 3.2.0.14-3.2.0.18 have a standing block preventing requests

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Go Wow
Check access.log and verify whether the traffic is passing through squid from the client machine. -Sent via Blackberry -Original Message- From: J Webster jw.jwebs...@gmail.com Date: Fri, 10 Aug 2012 20:34:31 To: squid-users@squid-cache.org Subject: [squid-users] squidguard not blocking

Re: [squid-users] squidguard not blocking

2012-08-10 Thread J Webster
it is, I get the server IP address when browsing and log is full of HIT MISS lines etc On 10 Aug 2012, at 22:30, Go Wow gow...@gmail.com wrote: Check access.log and verify whether the traffic is passing through squid from the client machine. -Sent via Blackberry -Original

Re: [squid-users] squidguard not blocking

2012-08-10 Thread Go Wow
Is squidguard log config in squidguard.conf file? If not config the log and watch the log whether the traffic is hitting SG or not. I feel there some config issue in SG. Let us see your config files and client IP or username. -Sent via Blackberry -Original Message- From: J Webster

Re: [squid-users] 100% CPU

2012-08-10 Thread Amos Jeffries
On 11/08/2012 3:05 a.m., Hank Disuko wrote: Hi folks, I'm using: Squid Cache version 3.0.STABLE13 for i686-suse-linux This cache has been running well for at least a couple years, or more. As of yesterday, my squid process started using 100% CPU and users on the proxy are experiencing