RE: [squid-users] Utorrrent through squid

2010-09-23 Thread GIGO .
Date: Thu, 23 Sep 2010 03:49:06 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Utorrrent through squid On 22/09/10 22:43, GIGO . wrote: So Amos does this means that downloading of torrents with earlier version of squid is not possible at all

[squid-users] Utorrrent through squid

2010-09-22 Thread GIGO .
Hi all, I am unable to run utorrent software through squid proxy due to ipv6 tracker failure.I am unable to connect to an ipv 6 tracker. 1285141356.609152 10.1.97.27 TCP_MISS/504 1587 GET http://ipv6.torrent.ubuntu.com:6969/announce? - DIRECT/ipv6.torrent.ubuntu.com text/html [Host:

RE: [squid-users] Utorrrent through squid

2010-09-22 Thread GIGO .
] Utorrrent through squid On 22/09/10 19:56, GIGO . wrote: Hi all, I am unable to run utorrent software through squid proxy due to ipv6 tracker failure.I am unable to connect to an ipv 6 tracker. 1285141356.609 152 10.1.97.27 TCP_MISS/504 1587 GET http://ipv6.torrent.ubuntu.com:6969

RE: [squid-users] Alerting when cache Peer is used.

2010-09-20 Thread GIGO .
when cache Peer is used. On 17/09/10 23:14, GIGO . wrote: I have configured my proxy servers in two regions for backup internet path of each other by declaring the following directives. Directives on Proxy A: cache_peer A parent 8080 0 proxy-only prefer_direct on nonhierarchical_direct

[squid-users] Alerting when cache Peer is used.

2010-09-17 Thread GIGO .
I have configured my proxy servers in two regions for backup internet path of each other by declaring the following directives. Directives on Proxy A: cache_peer A parent 8080 0 proxy-only prefer_direct on nonhierarchical_direct off cache_peer_access A allow all Directives on Proxy B:

[squid-users] Facebook issue despite server_http11 on

2010-08-11 Thread GIGO .
Dear All, I am using squid 2.7 stable 9 version the facebook was working fine since yesterday and suddenly the issue appears that a blank page comes whenever tried to access facebook. I have tried the recommended directive server_http11 on But the problem is unresolved please help.

[squid-users] Cache Peer Setup Mutual Parents

2010-07-24 Thread GIGO .
Dear All, Is it possible to use squid as backup path if going direct fails? i am using squid 2.7 stable 9 with cache_digest enabled. Follwoing are the directives i think will do it please check them if they are correct? Setting of cache at North Region: cache_peer SOUTH parent

RE: [squid-users] Delay Pool Configuration Confirmation.

2010-07-24 Thread GIGO .
Date: Sat, 24 Jul 2010 14:06:37 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Delay Pool Configuration Confirmation. GIGO . wrote: Right Amos i think what i want was the class 2 so i will configure as you suggest

[squid-users] Delay Pool Configuration Confirmation.

2010-07-22 Thread GIGO .
Dear all, I am using squid 2.7 stable 9. I want to restrict downloads for every one both authenticated and IP based clients to 128KB at the day time and with full capacity at night. I have done the following configurations however they dont seem to work for me. Can you confirm that if they

RE: [squid-users] Delay Pool Configuration Confirmation.

2010-07-22 Thread GIGO .
Subject: Re: [squid-users] Delay Pool Configuration Confirmation. GIGO . wrote: Dear all, I am using squid 2.7 stable 9. I want to restrict downloads for every one both authenticated and IP based clients to 128KB at the day time and with full capacity at night. I have done the following

[squid-users] clientcahehit: request has store_url http://www.xyx.com/whaever/abc.xyz ; mem object in hit has mis matchedurl

2010-07-20 Thread GIGO .
Dear All, I am having lot of such errors please your help and guidance is required. 2010/07/20 17:26:34| clientCacheHit: request has store_url 'http://www.cricinfo.com/navigation/cricinfo/ci/scorecard.css'; mem object in hit has mis-matched url

[squid-users] squid stable 2.7 stable 9 store url errors in cache.log

2010-07-19 Thread GIGO .
Dear All, I am seeing the following in my cache.log. Is this refering to some misconfiguration or issue ? 2010/07/19 17:58:20| clientCacheHit: request has store_url 'http://cdn.nytimes.com/images/apps/timespeople/none.png'; mem object in hit has mis-matched url

RE: [squid-users] swapfile header too small

2010-07-16 Thread GIGO .
Amos, Thank you. I will do as per your advice. regards, Bilal Date: Fri, 16 Jul 2010 13:43:17 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] swapfile header too small GIGO . wrote: Dear All, I

[squid-users] swapfile header too small

2010-07-15 Thread GIGO .
Dear All, I am finding this in my cache.log file. 2010/07/15 19:12:14| WARNING: swapfile header too small 2010/07/15 19:12:14| WARNING: swapfile header too small 2010/07/15 19:28:30| WARNING: swapfile header too small squid 2.7 stable 9 installed on RHEL What is the reason of these

[squid-users] Download manager

2010-07-09 Thread GIGO .
I am using ISA as a parent peer and have squid has no direct connection to internet I am unable to use IDM with Squid proxy i have both tried with Authenticated as well as IP based client but its not being successful.Another download manager (FDM) works fine with the same setup Error is

RE: [squid-users] Re: Re: Re: squid_kerb_auth (parseNegTokenInit failed with rc=102)

2010-07-05 Thread GIGO .
. If they have the same access right you can use -g inetgrl...@mailserver.v.local:inetgrl...@mailserver.v.local:inetgrl...@mailserver.v.local Regards Markus - Original Message - From: GIGO . To: squidsuperuser2 ; SquidHelp Sent: Thursday, July 01, 2010 11:31 AM Subject: RE: [squid-users

RE: [squid-users] Re: Re: squid_kerb_auth (parseNegTokenInit failed with rc=102)

2010-06-30 Thread GIGO .
and squid_kerb_ldap to create more debut output and send the cache.log extract Regards Markus GIGO . wrote in message news:snt134-w34626d5c8ec65f9d8495b1b9...@phx.gbl... Hi Henrik/Markus/All Every setting(keeping in view your recommendation) was correct i many a times confirmed that.Even i tried re

RE: [squid-users] Startup/shutdown script which was working perfactly alright for squid 3.0stable25 is not working for squid 2.7 stable9.0

2010-06-30 Thread GIGO .
-cache.org Subject: Re: [squid-users] Startup/shutdown script which was working perfactly alright for squid 3.0stable25 is not working for squid 2.7 stable9.0 GIGO . wrote: Hi all, I am able to run squid manually however whenever i try to run it through the startup/shutdown script it fails

RE: [squid-users] Re: squid_kerb_auth (parseNegTokenInit failed with rc=102)

2010-06-29 Thread GIGO .
: squid_kerb_auth (parseNegTokenInit failed with rc=102) Make sure the squid servers hostname matches squidhr1.v.local. If not use -s HTTP/squidhr1.v.local as an option to squid_kerb_auth. Regards Markus GIGO . gi...@msn.com wrote in message news:snt134-w64257c53609757cd3cf006b9...@phx.gbl

[squid-users] DNS server setup for squid/kerberos

2010-06-23 Thread GIGO .
Dear All, Your help is required. Problem: Setting up squid in an Active Directory environment. (where Active Directory domain controllers, Windows clients, UNIX clients, and application servers must all have a shared understanding of the correct host names and IP addresses for each

RE: [squid-users] Confusion regarding regex

2010-06-21 Thread GIGO .
Date: Wed, 16 Jun 2010 23:11:08 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Confusion regarding regex GIGO . wrote: Hi, Please need your guidance regarding the regex used by squid. Is it bre ere or perl? I assume that squid

RE: [squid-users] Confusion regarding regex

2010-06-21 Thread GIGO .
+ skrev GIGO .: Hi Amos, There is still some confusion regarding regex and any help will be great please. you told that squid uses posix regex but is it BRE or ERE??? Extended. as for ERE according to my best understanding special characters are not required to be escaped

[squid-users] Confusion regarding regex

2010-06-16 Thread GIGO .
Hi, Please need your guidance regarding the regex used by squid. Is it bre ere or perl? I assume that squid using a gnurep compatible version? Am i right? In grep to use some metacharacter we have to encode it which are ‘\?’, ‘\+’, ‘\{’, ‘\|’, ‘\(’, and ‘\)’ does this hold true to write

RE: [squid-users] Confusion regarding regex

2010-06-16 Thread GIGO .
23:11:08 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Confusion regarding regex GIGO . wrote: Hi, Please need your guidance regarding the regex used by squid. Is it bre ere or perl? I assume that squid using a gnurep compatible version? Am i

RE: [squid-users] Youtube -An error occured, please try again later

2010-05-31 Thread GIGO .
] Youtube -An error occured, please try again later GIGO . wrote: Hi henrik, Right now i don't have my access.log. (will share it with you after the weekend) However let me tell you that after setting the negative_ttl to 0. Apparently the problem was resolved. But i need to be sure about

FW: [squid-users] Youtube -An error occured, please try again later

2010-05-28 Thread GIGO .
My store.logs are following 1275025642.358 SWAPOUT 00 8152 04FD0DB17EE9789F06B1386F1D6CDA4D 200 1275025483 1234793502 1275047700 video/x-flv 5142132/5142132 GET

RE: [squid-users] Youtube -An error occured, please try again later

2010-05-28 Thread GIGO .
: On Fri, 28 May 2010 06:15:32 + GIGO . wrote: My store.logs are following A. Because people read from top to bottom. Q. Why should I not top post? Ah, fun... you know. sdrawkcab daer lla tnac ew so please dont posting above the reference what is top posting? and my

RE: [squid-users] Youtube -An error occured, please try again later

2010-05-28 Thread GIGO .
, Bilal Subject: Re: [squid-users] Youtube -An error occured, please try again later From: hen...@henriknordstrom.net To: gi...@msn.com CC: squid-users@squid-cache.org Date: Fri, 28 May 2010 18:53:19 +0200 fre 2010-05-28 klockan 05:33 + skrev GIGO

RE: [squid-users] Running Multiple instances and reporting confusion.

2010-05-27 Thread GIGO .
-cache.org Subject: Re: [squid-users] Running Multiple instances and reporting confusion. GIGO . wrote: Hi all, I am running multiple instances of squid on the same machine. One instance is taking the clients request and forwarding to its parent peer at 127.0.0.1. All is going well. However

[squid-users] Youtube -An error occured, please try again later

2010-05-27 Thread GIGO .
Hi all, For some of my youtube videos i am getting the following error. An error occured, please try again later. I have confirmed that this only occur when squid is being used. find below the relevant information in this regard. cache_dir aufs

[squid-users] Squid 2.7 working with reference to storeurl/caching?

2010-05-23 Thread GIGO .
Hi all, I request that please read my squid.conf file and guide me on the order of the directives and any issue as i am unable to cache a single thing. Does it matter the order of definition of the following? 1. storeurl program 2. refresh patterns 3 storeurl rewrite lists... I assume :

[squid-users] Runcache script- Lot of confusion

2010-05-22 Thread GIGO .
Hi all, Please guide about runcache script behaviour uptil now i have only understood this that this script will check and autorestart squid in case of failure. I also assume that this script should be registered with init.d for startup/shutdown. Where is this script located?(2.7 version).

[squid-users] Startup/shutdown script which was working perfactly alright for squid 3.0stable25 is not working for squid 2.7 stable9.0

2010-05-22 Thread GIGO .
Hi all, I am able to run squid manually however whenever i try to run it through the startup/shutdown script it fails. This is the same script working for squid 3.0 stable 25 however i am not being able to figure out that why its failing on squid 2.7 stable 9? Neither of the instance starts

[squid-users] Memory Considerations when you are running multiple instances of squid on the same server.

2010-05-21 Thread GIGO .
Hi All, can it be said as a generalization that one can allocate/fix 1/4 of physical ram for cache mem objects. Will it holds true even when you are running multiple instances??? please guide that how memory handling will be occuring in multiple instances setup???cache_mem will

RE: [squid-users] Memory Considerations when you are running multiple instances of squid on the same server.

2010-05-21 Thread GIGO .
instances of squid on the same server. fre 2010-05-21 klockan 06:38 + skrev GIGO .: can it be said as a generalization that one can allocate/fix 1/4 of physical ram for cache mem objects. Will it holds true even when you are running multiple instances??? I would not generalize a rule

[squid-users] squid_kerb_auth Squid_kerb_ldap (Squid 2.7)

2010-05-20 Thread GIGO .
Hi all, Does squid_kerb_auth squid_kerb_ldap work fine in squid 2.7 like squid 3.x. Are these the correct options? ./configure *...*--enable-basic-auth-helpers=LDAP --enable-auth=basic,negotiate,ntlm --enable-external-acl-helpers=wbinfo_group,ldap_group

RE: [squid-users] squid_kerb_auth Squid_kerb_ldap (Squid 2.7)

2010-05-20 Thread GIGO .
:52 + skrev GIGO .: Does squid_kerb_auth squid_kerb_ldap work fine in squid 2.7 like squid 3.x. Yes. ./configure *...*--enable-basic-auth-helpers=LDAP --enable-auth=basic,negotiate,ntlm --enable-external-acl-helpers=wbinfo_group,ldap_group --enable-negotiate-auth-helpers

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-19 Thread GIGO .
increase the security of your proxy server. But you will need to build a policy module for squid_kerb_auth witch is not currently supported by selinux policy on redhat-like systems. What distrib do you use ? Tiery On Wed, May 19, 2010 at 6:17 AM, GIGO . wrote: Thank you i will give

[squid-users] Squid 3.1.3 squid 2.7 running together on the same server.

2010-05-19 Thread GIGO .
Hi All, I was running multiple instances of squid 3.0 Stable 25 on the same server successfully. However i intend to run squid 2.7 3.1.3 on the same server now reason being 2.7s enhance support of dynamic content caching. (Earlier the main intention to use multiple instances was to give

[squid-users] SELINUX issue

2010-05-18 Thread GIGO .
Hi all, When i change SELINUX from permissive mode to Enforcing mode. My multiple instance setup fail to start. Please guide how to overcome this. ---Excerpts from cache.log- 2010/05/18 10:31:51| TCP connection to 127.0.0.1/3128 failed 2010/05/18

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-18 Thread GIGO .
Dear All, Your guidance is required. Please help. It looks that squid process run by default as a confined process whether its a compiled version or a version that come with the linux distro. It means that the squid software is SELINUX aware.Am i right? [r...@squidlhr ~]# ps -eZ | grep

[squid-users] Running Multiple instances and reporting confusion.

2010-05-18 Thread GIGO .
Hi all, I am running multiple instances of squid on the same machine. One instance is taking the clients request and forwarding to its parent peer at 127.0.0.1. All is going well. However there is a confusion related to reporting through sarg. To capture the client activity sarge is parsing

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-18 Thread GIGO .
| audit2allow You can also try to restore selinux context for all squid files: restorecon -R /etc/squid restorecon -R /var/log/squid etc... or touch /.autorelabel and reboot Tiery On Tue, May 18, 2010 at 9:47 AM, GIGO . wrote: Dear All, Your guidance is required. Please help. It looks

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-18 Thread GIGO .
context (with restorecon or .autorelabel and reboot). But i am not sure modifing this file is the best way. It you update your selinux policy, changement will not be persistent. I think it is better to build a selinux module for our squid. Tiery On Tue, May 18, 2010 at 2:34 PM, GIGO . wrote

RE: [squid-users] SELINUX issue

2010-05-18 Thread GIGO .
2010-05-18 klockan 06:02 + skrev GIGO .: 2010/05/18 10:31:52| storeLateRelease: released 0 objects 2010/05/18 10:31:52| TCP connection to 127.0.0.1/3128 failed setsebool -P squid_connect_any true should help there. Regards Henrik

[squid-users] Squid Compilation

2010-05-18 Thread GIGO .
Hi All, Your guidance is required regarding compilation. I had compiled squid-3.0.STABLE25 with the following options: ./configure --prefix=/usr --includedir=/usr/include --datadir=/usr/share --bindir=/usr/sbin --libexecdir=/usr/lib/squid --localstatedir=/var --sysconfdir=/etc/squid

[squid-users] never_direct/always_direct

2010-05-17 Thread GIGO .
Dear all, never_direct/always_direct Why two directives had to be created while one directive could have done the trick? Please guide regards, Bilal _ Hotmail: Free, trusted and rich

RE: [squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-17 Thread GIGO .
Caching/Windowsupdate/Facebook/youtube GIGO . wrote: All, I am really sorry i was looking at the access.log file of squid instance that is user facing and not the instance that is doing the fetching/caching and there i can see mp4 files being cached. However i am not very much confident

[squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-14 Thread GIGO .
Dear All, I require your help and guidance regarding dynamic content caching. Following are the quries. 1. I am running squid in multiple instances mode (For Cache Disk Failure Protection). I dont think that it has any effect on internet object caching? I am confused that if connect

RE: [squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-14 Thread GIGO .
All, I am really sorry i was looking at the access.log file of squid instance that is user facing and not the instance that is doing the fetching/caching and there i can see mp4 files being cached. However i am not very much confident about my settings so please read my queries and the

[squid-users] Access.log

2010-05-14 Thread GIGO .
Hi all, Can anybody please explain me what does this error mean and why it occurs it happens while i was testing youtube/facebook caching. TCP_NEGATIVE_HIT/204 Does this suggest that some object in cache has corrupted? if so how to rectify the error? Is this error only means that

[squid-users] Cache Contents.

2010-05-10 Thread GIGO .
Dear All, I want to confirm that my youtube/facebook and windowsupdate are being cached as i configured. How to have this assurity. Further i wish to view what are the contents of my cache. Please guide in this respect. Thanking you regards, Bilal

[squid-users] Squid in Deamon Mode

2010-05-10 Thread GIGO .
Hi, I start squid in the normal mode as following: /usr/sbin/squid -D -f /etc/squid/squid.conf Could there be any benefit achieved running it in a deamon mode. Can please somebody guide in detail Thanking in advance regards, Bilal

[squid-users] Yum Updates and Squid

2010-05-04 Thread GIGO .
Dear All,   Is it safe enough to use Automatic yum updates on the squid Server machine? Is there any strict package version requirements to have those with which squid was already installed.     Automatic updates will even upgrade kernel as well so is it ok?        Please your guidance

[squid-users] Authentication Reverse Proxy

2010-05-02 Thread GIGO .
Hi, What is the behaviour/mechanism of authentication if using squid proxy for both as forward proxy and reverse proxy. I have successfully setup it for a forward proxy using the Helper files by Markus and the following tutorial;

[squid-users] squid_kerb_ldap/squid_kerb_auth in Single Forest Multidomains Active Directory.

2010-04-25 Thread GIGO .
Dear All, The problem under discussion is a continutity of SPN creation/Single Forest MultiDomain (Active Directory) topic. @ Markus Yes my infrastructure is Active Directory based (Root Forest Directory A with two child domains B (80 % users) C (20 % users) in their own trees). Only

[squid-users] Single Forest Multiple Domains kebreos setup (squid_kerb_ldap)

2010-04-22 Thread GIGO .
Dear Markus/All, Please guide me on the matter discussed below: Single Forest Multiple Domain setup A / \ / \ BC Problem: Single FOrest Multiple domains where as Root A is empty

[squid-users] SPN case sensitivity culprit for Negotiate/Kerberos Failures +msktutil

2010-04-21 Thread GIGO .
Dear Markus/Nick/All, After a great struggle and help (i got from you people)i was managed to resolve the issue however i have few confusions which i wish you to ask please. 1. First of all I traced down my problem to SPN Names casesensitivity the case for ServicePrincipalName attribute

[squid-users] Kerberos Authentication in Relation to Connect ACLs

2010-04-16 Thread GIGO .
I get the following error whenever i try to use squid: (currently i am trying to use it from the AD which is also the KDC for squid to provide authentication.) Access Denied: Access control configuration prevents your request from being allowed at this time. Please contact your service

RE: [squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-16 Thread GIGO .
. Nick On 16/04/2010 08:43, GIGO . wrote: Dear Nick/Markus, I am totally lost in translation and am not sure what to do i need your help please. The problem is that my kerberos authentication is not working. In my virtual environment i have two machines one configured as Domain

RE: [squid-users] Re: Re: Re: Creating a kerberos Service Principal.

2010-04-16 Thread GIGO .
the browser is returning a NTLM token not a Kerberos token whu squid_kerb_auth will deny access. Regards Markus GIGO . gi...@msn.com wrote in message news:snt134-w155de8e05828b08d15c09ab9...@phx.gbl... Dear Nick, This was the result of my klist -k command: [r...@squidlhrtest log

RE: [squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-15 Thread GIGO .
account of the UnixAdministrators to it. Finally I change the permissions on the OU=UnixPrincipals so that the members of the group UnixAdministrators have full rights (or limited rights ) for objects under this OU. Regards Markus GIGO . wrote in message news:snt134

RE: [squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-15 Thread GIGO .
/ spn upn and not just the domain. Also check your DNS and host local host entries. E.g.: msktutil -c -b CN=COMPUTERS -s HTTP/squid1.[mydomain] -k /etc/squid/HTTP.keytab --computer-name auth1 --upn HTTP/squid1 --server dc1 -verbose Nick On 15/04/2010 07:22, GIGO . wrote: Dear Markus

[squid-users] Unable to create keytab Msktutil ldap_set_option failed (local errror)

2010-04-15 Thread GIGO .
Dear All, Once again i failed to properly create keytab. Following is the detail of how i performed this task step No 1: i changed my krb5.conf file as follows; [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log

RE: [squid-users] ipcCreate error:

2010-04-15 Thread GIGO .
2010-04-14 klockan 04:47 + skrev GIGO .: Hi Henrik, Thank you this problem is resolved by placing the squid_kerb_auth in the libexec folder. Now i beleive that i also have to place any other helpers like squid_ldap_group in the same location to get it to work. Yes. if you have selinux

[squid-users] Upgradtion to Squid 3.1.1

2010-04-13 Thread GIGO .
When you upgrade is it possible to use the existing cache directories created through previous version(squid 3) or you have to rebuild your cache. regards, Bilal Aslam _ Hotmail: Trusted

RE: [squid-users] ipcCreate error:

2010-04-13 Thread GIGO .
: hen...@henriknordstrom.net To: gi...@msn.com CC: squid-users@squid-cache.org Date: Sat, 10 Apr 2010 19:44:31 +0200 Subject: Re: [squid-users] ipcCreate error: lör 2010-04-10 klockan 09:23 + skrev GIGO .: I have created a user proxy in Centos from which i am running my squid successfully

[squid-users] Authorization via LDAP group

2010-04-12 Thread GIGO .
Authorizing users via LDAP group: It is listed in the squid_ldap_group man page that using -D binddn -W secret fle is to be preferred on -D binddn -w password. While it provides extra security then printing the password in plaintext inside squid.conf. Doesnt this query itself go in clear

[squid-users] ipcCreate error:

2010-04-10 Thread GIGO .
I have created a user proxy in Centos from which i am running my squid successfully with all the rights properly configured until i change my configuration file for Negotiate/Kerboros. I am receiving the following error when trying to start squid: 2010/04/09 05:06:12| helperOpenServers:

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
this? Happy to discuss any of this off list or on. Cheers, Nick On 08/04/2010 04:06, GIGO . wrote: If i select negotiate/Kerberos as authentication protocol for my Squid on Linux and configure no FallBack Authentication.what would be the consequence ? 1. Isnt it that all of my users who

RE: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
regenerated. Have you experienced this? Happy to discuss any of this off list or on. Cheers, Nick On 08/04/2010 04:06, GIGO . wrote: If i select negotiate/Kerberos as authentication protocol for my Squid on Linux and configure no FallBack Authentication.what would be the consequence ? 1

RE: [squid-users] Re: Creating a kerberos Service Principal.

2010-04-08 Thread GIGO .
down-side to Kerberos is that it's an all-or-nothing service, either you use Kerberos and only Kerberos or you risk security breaches in any mixed situation. HTH Khaled 2010/4/6 GIGO . : Dear All, Please guide me in regard to SSO setup with Active Directory(No winbind/Samba). I have

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-07 Thread GIGO .
If i select negotiate/Kerberos as authentication protocol for my Squid on Linux and configure no FallBack Authentication.what would be the consequence ? 1. Isnt it that all of my users who have logged into Active Directory and where browser is supported will be able to use squid? 2.

[squid-users] Creating a kerberos Service Principal.

2010-04-06 Thread GIGO .
Dear All, Please guide me in regard to SSO setup with Active Directory(No winbind/Samba). I have the following questions in this regard. 1. Creating a Kerberos service principal and keytab file that is used by the Squid what is the effective method? Difference between using Ktpass vs

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-06 Thread GIGO .
think it will depend on your environment. Regards Markus GIGO . wrote in message news:snt134-w101cbed44254f957cda154b9...@phx.gbl... Dear Markus, Please i have few confusions which i want to satisfy. 1. If kerberos Authentication fails then what would be the fallback behavior would

[squid-users] Negotiate/NTLM Authentication a safer option then Negotiate/Kerberos??

2010-04-06 Thread GIGO .
Hi All, In our environment currently we are using ISA server with userbased authentication. we are using windows 2003 Active Directory and almost all of the users are using Windows based OS. We want to seemlessly migrate our users to Squid. I have not yet reached to any conlusion despite lot

RE: [squid-users] Re: SSO with Active Directory-Squid Clients

2010-04-05 Thread GIGO .
with Active Directory-Squid Clients Have a look at http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos and http://sourceforge.net/projects/squidkerbauth/files/squidkerbldap/squid_kerb_ldap-1.2.1/squid_kerb_ldap-1.2.1.tar.gz/download Regards Markus GIGO . wrote in message news:snt134

[squid-users] SSO with Active Directory-Squid Clients

2010-04-03 Thread GIGO .
Dear All/Amos, I want to allow certain(not all) Active Directory users to use squid by way of SSO with Active Directory. So means when any one from those specific users will login into Active Directory they should have automatically access to internet via Squid Proxy. Other AD users which

[squid-users] Upgrade to 3.1.1

2010-04-02 Thread GIGO .
Is it possible to upgrade from Squid3.0 to Squid3.1.1 by applying patch/diff. Is there any howto available which can be refered to? Should every body upgrade? _ Hotmail: Trusted email with

[squid-users] DNS Related Problem resolved your further guidance is required.

2010-03-31 Thread GIGO .
Date: Tue, 30 Mar 2010 17:05:50 +1300 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help. GIGO . wrote: I am using ISA server as cache_peer parent and runing multiple instances on my squid

[squid-users] Squid Reporting.

2010-03-31 Thread GIGO .
Is there a trick to trace cache_hits and Cache_misses in SARG and in more readable format.Also in detail and summarized form that how much data has been came through the cache.or i have to use someother tool and which? what is the best reporting tools to use for squid.Can someone give a

[squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread GIGO .
I am using ISA server as cache_peer parent and runing multiple instances on my squid Sever. However i am failing to understand that why the behaviour of Squid is extremely slow. At home where i have direct access to internet the same setup works fine.Please somebody help me out regards,

RE: [squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread GIGO .
Very Slow responsetime. Experts please help. GIGO . wrote: I am using ISA server as cache_peer parent and runing multiple instances on my squid Sever. However i am failing to understand that why the behaviour of Squid is extremely slow. At home where i have direct access to internet

[squid-users] cache_peer

2010-03-28 Thread GIGO .
I want that if my first listed cache peer goes down then only should my second peer be used. - cache_peer 127.0.0.1 3128 0 default no-digest no-query no-delay (only if this is unavailable then the second one listed is used) cache_peer 10.1.82.205 8080 0 default proxy-only

[squid-users] Rebuilding storage in /var/spool/squid3 (DIRTY) ?

2010-03-26 Thread GIGO .
What is the meaning of Rebuilding storage in /var/spool/squid3 (DIRTY). regards, _ Your E-mail and More On-the-Go. Get Windows Live Hotmail Free.

RE: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory

2010-03-26 Thread GIGO .
Subject: Re: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory On Sun, 21 Mar 2010 19:37:56 +, GIGO . wrote: Please guide me on this whats wrong. I am unable to compile Squid3stable24 on Ubuntu 8.04 LTS server. I want to use

[squid-users] After Running Multiple Instances my Squid speed/response is extremely slow.

2010-03-25 Thread GIGO .
DearAll, Please help me on this as after setting up multiple instances on the same server for (cache Directory fault tolerance myy squid speed/response is extremely slow and even most of the sites keep on opening and opening. I am failing to figure out whats wrong. Please guide me on this i

RE: [squid-users] After Running Multiple Instances my Squid speed/response is extremely slow.

2010-03-25 Thread GIGO .
Please I want to add information for my previous query. My previous setup with single instance was running fine.Another change is that i compiled my new setup with more options this time like enabling delay pools , cache digest and active directory authentication support. Is the below issue in

[squid-users] Extreme Slow Resposne from Squid ( Test environment only 4 users at the moment)

2010-03-25 Thread GIGO .
From the multiple instance setup using Squid 3stable25 i have shifted to squid3stable1 packaged with ubuntu 8.04 LTS.However i am unable to understand why its too much slow. Whats wrong please anybody help out.Is it something to do with Operating system? Or initially Squid runs that much slow?

FW: [squid-users] Peering squid multiple instances.

2010-03-24 Thread GIGO .
: Re: [squid-users] Peering squid multiple instances. GIGO . wrote: I have successfully setup running of multiple instances of squid for the sake of surviving a Cache directory failure. However I still have few confusions regarding peering multiple instances of squid. Please guide me

[squid-users] Allowing ports used by Squid through Iptables.

2010-03-24 Thread GIGO .
I want to do the security hardening of my Squid Server with Iptables. I intend to have no rule on outbond traffic however ibound traffic would be restricted. please guide what are the minimum ports that are required to be open on iptables. Following is what i thought: Allow all incoming

[squid-users] Squid Compilation and Active Directory Authentication

2010-03-24 Thread GIGO .
purpose: To authenticate squid users through active directory before allowing them access to internet. Compile Options: ./configure --prefix=/usr --localstatedir=/var --libexecdir=${prefix}/lib/squid --srcdir=. --datadir=${prefix}/shares/squid --sysconfdir=/etc/squid3

[squid-users] Peering squid multiple instances.

2010-03-23 Thread GIGO .
I have successfully setup running of multiple instances of squid for the sake of surviving a Cache directory failure. However I still have few confusions regarding peering multiple instances of squid. Please guide me in this respect. In my setup i percept that my second instance is doing

[squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory

2010-03-21 Thread GIGO .
Please guide me on this whats wrong. I am unable to compile Squid3stable24 on Ubuntu 8.04 LTS server. I want to use active directory authentication(my clients should be able to authenticate themselves with active directory accounts) Following is my command: ./configure

[squid-users] Absolute Beginner help required on concepts related to Cache_effective_user.

2010-03-19 Thread GIGO .
On a compiled squid3 stable24. I am unable to run squid as root in Ubuntu. So the cache_effective_user defined in squid.conf never comes into play. Is this a security concern? what good is cache_effective_user for? Is it right to run squid with the default ubuntu user one has installed

RE: [squid-users] Cache_dir size considerations

2010-03-19 Thread GIGO .
considerations GIGO . ha scritto: Well i want to make sure that my settings are optimized and want to learn more about the cache_dir settings.let me come in details Gigo, you are asking a lot of questions all at once. This is a volounteer-based support list, so your chances of getting

RE: [squid-users] Squid cache_dir failed - can squid survive?

2010-03-18 Thread GIGO .
Dear henrik, If you have only one physical machine what is the best strategy for miminmizing the downtime and rebuild the cache directory again or start utilizing the squid without the cache directory? I assume we have to reinstall the Squid Software? Please guide

[squid-users] Cache_effective_user issue

2010-03-18 Thread GIGO .
I installed ubuntu server as u-admin account. I have set the directive: cache_effective_user to squidadmin. However my squid process keep on running as b-admin account. And my cache_effective user never comes into play. As per a guide which described that squid will only shift to the defined

[squid-users] Squid proxy Setup in fail-over mode

2010-03-18 Thread GIGO .
How to setup squid proxy to run in fail-over mode? Any guide. regards, Bilal Aslam _ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

RE: [squid-users] Squid cache_dir failed - can squid survive?

2010-03-18 Thread GIGO .
@squid-cache.org Date: Thu, 18 Mar 2010 09:54:34 +0100 Subject: RE: [squid-users] Squid cache_dir failed - can squid survive? tor 2010-03-18 klockan 06:16 + skrev GIGO .: Dear henrik, If you have only one physical machine what is the best strategy for miminmizing the downtime and rebuild

  1   2   >