On 02/03/2013 08:43 PM, Amos Jeffries wrote:
> However, these operations are only needed occasionally and I am hopng to
> build that functionality into a tool outside of the main proxy binary.
> We have a set of *dump tools and the squidpurge tool, an the -z
> functionality which need to be cleane
Hi,
I can not for the life of me work out how to use ext_kerberos_ldap_group_acl
with squid 3.2.6
I have authentication with negotiate_kerberos_auth working fine but I also want
authorisation helper for group membership.
Relevant squid.conf config below..
# Kerberos Auth
auth_param negotiate
On Thu, Feb 7, 2013 at 1:11 PM, Nick Rogers wrote:
> On Thu, Feb 7, 2013 at 12:41 PM, Nick Rogers wrote:
>> Hello,
>>
>> I am running squid 3.2.7 under FreeBSD 9.1. Recently I noticed that
>> the tcp_outgoing_tos directive no longer uses the X-Forwarded-For
>> header for the purposes of ACL compa
On Thu, Feb 7, 2013 at 12:41 PM, Nick Rogers wrote:
> Hello,
>
> I am running squid 3.2.7 under FreeBSD 9.1. Recently I noticed that
> the tcp_outgoing_tos directive no longer uses the X-Forwarded-For
> header for the purposes of ACL comparisons. Other directives (e.g.,
> tcp_outgoing_address) wor
Hello,
I am running squid 3.2.7 under FreeBSD 9.1. Recently I noticed that
the tcp_outgoing_tos directive no longer uses the X-Forwarded-For
header for the purposes of ACL comparisons. Other directives (e.g.,
tcp_outgoing_address) work with the X-Forwarded-For IP against the
SAME ACL.
My squid ve
Hello,
at the moment some users are using my new proxy (with kerberos auth instead of
NTLM). There is just one unlikely thing yet. First time browser starts (start
page google) it takes several seconds till google page is loaded. When I
continue browsing to another page, this delay isn't notice
On 02/06/2013 10:42 PM, Alex Rousskov wrote:
> Yes, it is. In old Squids, -z implied no-daemon mode. Then folks wanted
> to use SMP macros in their configurations, including their cache_dir
> lines. Those macros require SMP mode (each Squid kid gets its own set of
> macro values) so we removed that
