On Thu, Jan 7, 2010 at 2:30 PM, Johann Terblanche
jterblan...@ebisafrica.co.za wrote:
Hi Kinkie
Thanks for your response.
I've looked at the log file and below is a extract of a site but I do
not fully understand the meaning of _MISS _HIT _DENIED
ok DENIED is obvious but why
On Thu, Jan 7, 2010 at 2:50 PM, torcaz99 torca...@hotmail.com wrote:
Hallo:
I'm trying to authenticate my Firefox(Linux) to Squid (Linux) using NTLM
without having to type my domain/user and password.
That's up to firefox. Squid cannot change the user-agent's behaviour.
--
/kinkie
to that site?
is that feasible?
yes. See http://www.squid-cache.org/Doc/config/cache_peer/ (in
particular the login= option to cache_peer)
--
/kinkie
the cache, squid -z? If so, can I just move the
40GB to the new cache 100GB cache and replace it the new directories
No, you wouldn't need to.
--
/kinkie
this,
and my cache wasn't loose. I THINK that you can do this.
(Sorry by my poor english)
Also watch out for processor architectures. swap.state (for sure) is
not portable across different CPU architectures; I'm not sure about
the metadata stored in each cache entry.
Kinkie
--
/kinkie
for
those specific destinations, and use a proxy such as squid for
everything else.
--
/kinkie
of squid to explicitly break the standard, but
that'd have to be application-specific).
--
/kinkie
of the problem.
Please see http://wiki.squid-cache.org/SquidFaq/BugReporting
--
/kinkie
://wiki.squid-cache.org/SquidFaq/BugReporting for hints
on how to proceed.
--
/kinkie
the MacPorts packaging system, but normal
configure/make/make install works for me too.
-C
On Dec 16, 2009, at 8:45 PM, Jeff Pang wrote:
Can squid be installed and run on a mac os box? Thanks.
--
Jeff Pang
http://home.arcor.de/pangj/
--
/kinkie
that (further down the file) are
the ACLs for
the delay pools.
In short, yes.
See http://wiki.squid-cache.org/ConfigExamples/Authenticate/Bypass
--
/kinkie
On Sun, Dec 13, 2009 at 11:34 PM, Dayo Adewunmi contactd...@gmail.com wrote:
Kinkie wrote:
On Sun, Dec 13, 2009 at 6:36 PM, Dayo Adewunmi contactd...@gmail.com
wrote:
Hi all
I was wondering if there needs to be any consideration that needs to be
taken
when it comes to ordering ACLs. My
to
access them, in much the same ways filesystems do.
But this is better tested out first in a specialized environment (e.g.
in a mem-based cache_dir implementation).
--
/kinkie
. Is this
in any way possible?
Thanks a ton.
Yes, it is.
There's plenty of documentation, FAQs, and configuration examples in
the squid wiki. I recommend you to take a tour there first.
--
/kinkie
an authentication prompt.
Authentication popups are unfortunately not under the control of
Squid: the proxy can ASK for authentication. How the browser presents
this to the user (or, in some cases, how does it NOT present it to the
user) is up to the browser itself.
--
/kinkie
fine. Now i
need to join this linux server to computer OU of Windows Active
Directory with windows DNS assign name. Could you help me how to do
that..
thanks,
VK
--
/kinkie
that service with no job stops automatically.
Can some one help?
What's in the cache.log file?
--
/kinkie
On Mon, Dec 7, 2009 at 2:30 PM, Preetham N. preetha...@gmail.com wrote:
hi,
below is the snippet from the log
Strange..
it seems to start and then voluntarily stop, no mention of errors.
Maybe Guido can help you more than I can..
--
/kinkie
users also a member of
InetAccessGroupRestricted are asked for their username and password
again.
And again and again and again...
I expected a access denied instead...
Please see http://wiki.squid-cache.org/ConfigExamples/Authenticate/Bypass
--
/kinkie
at Nabble.com.
--
/kinkie
/ConfigExamples/Authenticate/Bypass
--
/kinkie
for everyone (ourselves included).
Thanks
--
/kinkie
by itself. After reading
the core file with gdb and doing a backtrace I got the following info. Can
anyone please help me identify what is going on with these squid servers.
You help is very valuable.
Is there anything in cache.log? Possibly just the few lines before the restart.
--
/kinkie
okdests
http_access deny ipauth
http_access allow http safe_ports userdb
http_access deny all
Notice that this is an EXAMPLE: it misses protecting cachemgr, https,
ftp and all the other goodies which the default config takes care of.
--
/kinkie
2009/11/25 Jeff Peng jeffp...@netzero.com:
Seems no newer one.
exactly saying, that book is talking about squid-2.5 and below.
but, except the reverse-proxy, many other stuff are not changed much.
Regards.
The most comprehensive documentation is nowadays to be found in the
wiki. If there
Then, what parameters / settings are suggested? Seems difficult to
find a suitable one.
Should work out of the box. But then it depends what you mean by Slow Client
--
/kinkie
have already started shipping an updated ssl library
which somehow plugs the hole. After that (dynamic) library has been
installed on the host OS, Squid (after a restart at most) is
immediately protected from the flaw.
--
/kinkie
that within squid.
The best option is to use some external password storage mechanism,
such as LDAP, and some custom authorization script (I am not sure if
something like that can be found pre-built) to warn users.
What about the Squid Users Manager pkg?
Is there such a thing?
--
/kinkie
for
meta data to rebuild the swap.state journal from scratch.
visible_hostname 103_gateway
coredump_dir /var/spool/squid
Amos
--
Please be using
Current Stable Squid 2.7.STABLE7 or 3.0.STABLE19
Current Beta Squid 3.1.0.14
--
/kinkie
--
/kinkie
outside the proxy server's network so I will
not know the IP addresses.
_
Get the best of MSN on your mobile
http://clk.atdmt.com/UKM/go/147991039/direct/01/
--
/kinkie
sorry. It's a recently-developed feature.
--
/kinkie
-2914f3a846d41673d4ae34018142e672b8f258ce
--
/kinkie
it).
So, what I think I'm missing is what should be done if I'm running squid
in a non samba machine.
Any hints?
These questions are better asked to the Samba user-groups.
--
/kinkie
On Thu, Sep 17, 2009 at 10:26 PM, Matthew Morgan atcs.matt...@gmail.com wrote:
Kinkie wrote:
On Thu, Sep 17, 2009 at 7:11 PM, Matthew Morgan atcs.matt...@gmail.com
wrote:
Is there a way to configure squid so that objects from a certain domain
are
cached permanently? I am trying to get
distribution I know of), otherwise
you can check squid's build-in log rotation feature (see
squid.conf.documented).
/kinkie
On Wed, Sep 16, 2009 at 4:39 PM, Banyan He ban...@rootong.com wrote:
I've no ideas about the logging facility. But actually, you can try squid
-k retate with logrotate program
if you could help me.
NTLM pass-through is not available in squid-3.0. It is available in
3.1 (currently in beta) and 2.7.
--
/kinkie
also pretty bad performance-wise. 2000 regexps to be matchd
for each request can be pretty compute-intensive.
--
/kinkie
? For now I just want yes or no because the
rest I'll try to find myself.
Regards, your potential user.
--
/kinkie
necessary to define acl before use it ?
yes.
--
/kinkie
at
http://www.opennms.org/wiki/Squid_Data_Collection. There aren't any graph
definitions yet, but I thought something would be better than nothing.
Hi James,
I've referenced the URL from the squid wiki.
Thanks for your contribution :)
--
/kinkie
flawlessly using both 2.7-STABLE6 and 3.0-STABLE18 here.
--
/kinkie
Viadeo :
http://www.viadeo.com/invitationpersonnelle/0023asu3wwgwpzx
--
/kinkie
attacks on usernames and
passwords via ncsa authentication?
--
/kinkie
.
--
/kinkie
system. There's a way
to purge this site and your images from the cache?
--
View this message in context:
http://www.nabble.com/Squid-load-incorrectly-one-site-tp24845894p24848184.html
Sent from the Squid - Users mailing list archive at Nabble.com.
--
/kinkie
system. There's a way
to purge this site and your images from the cache?
--
View this message in context:
http://www.nabble.com/Squid-load-incorrectly-one-site-tp24845894p24848184.html
Sent from the Squid - Users mailing list archive at Nabble.com.
--
/kinkie
Sent from the Squid - Users mailing list archive at Nabble.com.
--
/kinkie
know if it's the
right thing for you.
--
/kinkie
OOps, I mistakenly sent the answer only to Andres..
-- Forwarded message --
From: Kinkie gkin...@gmail.com
Date: Mon, Jul 27, 2009 at 12:17 AM
Subject: Re: [squid-users] /etc/hosts is ignored when browser is
pointed to use a proxy, any workaround?
To: Andres Salazar ndrsslz
SIGNATURE-
--
/kinkie
with squid 3.1.0 and the GZIP eCAP module.
It's all a bit in beta tho..
--
/kinkie
NOTE 2: Our main goal is to minimize the amount of requests reaching the
backend servers.
What do you think about that?
What do you suggest for that?
Thank you,
Ronan
--
/kinkie
.
--
/kinkie
by these simple hints, we need to
have more informations, such as the output from squid -v and a more
complete configuration excerpt.
--
/kinkie
some ICAP service (but I don't know of any such
service).
--
/kinkie
On Mon, Jun 8, 2009 at 3:52 PM, Tech W.tech...@yahoo.com.cn wrote:
Hello,
How to make squid proxy only without caching?
Thanks.
in squid.conf:
cache deny all
See http://www.squid-cache.org/Doc/config/cache/
--
/kinkie
/) about an updated build.
Amos
--
/kinkie
is using HTTP 1.0 to connect, but in the squid
access log, it is using HTTP 1.1.
Are there anything I missed / mis-configured?
Thanks.
--
/kinkie
!
_
Show them the way! Add maps and directions to your party invites.
http://www.microsoft.com/windows/windowslive/products/events.aspx
--
/kinkie
/kinkie
Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebra...@charite.de | http://www.charite.de
--
Sent from my mobile device
/kinkie
by using
Squid cache ?
--
Sent from my mobile device
/kinkie
_
Looking to move somewhere new this winter? Let ninemsn property help
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Edomain%2Ecom%2Eau%2F%3Fs%5Fcid%3DFDMedia%3ANineMSN%5FHotmail%5FTagline_t=774152450_r=Domain_tagline_m=EXT
--
/kinkie
are looking for, you can
check the details at http://wiki.squid-cache.org/Features/eCAP
--
/kinkie
On Fri, May 22, 2009 at 12:18 PM, Hua Su huas...@gmail.com wrote:
Hi,
Is there any way to check whether a URL is cached or not? Thanks!
Sure: either from the access.log file if you are the cache
administrator, or from the X-Cache HTTP header if you are the
end-user.
--
/kinkie
, but can't
do the clients' work for them unfortunately.
Kinkie
is the most relevant parameter here)
From the look of it, the init script may be buggy or it may be
misdirected, and the questions above will be the ones most likely to
be helpful in understanding why
--
/kinkie
...@yahoo.com wrote:
Where can I find a doc on the internals of Squid ? Cache internals for
example.
Laurent
--
/kinkie
or for the effect of the changes on the meaning
of the material.
##
.
--
/kinkie
, unfortunately.
Can you try earlier releases and find out if there is one which works
for you? The ideal would be to find two consecutive releases, one
working and one not. This would greatly help pinpoint the issue.
Thanks!
--
/kinkie
time now, and even 2.6 is
obsolete. Please try 2.7 or 3.0..
--
/kinkie
://munin.projects.linpro.no/) and
(semi-custom so far) pollers for cachemgr.
--
/kinkie
it came with a very short Expires
timeout, or each time it generates a different ETag.
This trace would seem to indicate that squid decided that the object
could be cached at access-time, but that it was stale when it tried to
use it again.
--
/kinkie
can I take to resolve this?
http://wiki.squid-cache.org/Features/ConnPin
--
/kinkie
.
Is there any work around for this???
Use shorter error messages. I found that IE truncates them after a
couple of KB's..
--
/kinkie
.
--
/kinkie
the mails.
I would prefer that as I usually go via the gmane news server.
Thank you
Markus
--
/kinkie
be found in
the recent archives.
http://wiki.squid-cache.org/ConfigExamples/MultiCpuSystem
has some details.
It's less effificent than using an external load balancer, but it should help.
--
/kinkie
to have any secrets when the code is in the open :P
Squid is reasonably efficient. It can be - and hopefully is being -
still improved.
What is you guy comments on those issues ( c10k/epool etc)
Some of the most obvious issues have been addressed. There's still
lots to do tho.
--
/kinkie
performs, but I have no hard numbers to back this claim up.
Also, if you can control your users' browsers' configuration (which
would seem to be the case), having a proxy-pac-based HA solution is
not hard.
--
/kinkie
checking cache.log to see if there's
anything out of the ordinary there.
--
/kinkie
)
--
/kinkie
are you getting?
--
/kinkie
problem with defaults is that everyone has their own..
--
/kinkie
the helper concept together with them, but it's
now being maintained 100% by the Samba developers.
--
/kinkie
purposes the
same as setting up a reverse-proxy.
If that is what you really want to do, then you need to configure
squid appropriately.
You can check http://wiki.squid-cache.org/SquidFaq/ReverseProxy out to
get a first idea of what you need.
--
/kinkie
to the clients as network congestion allows.
The effectiveness of this varies tho, and depends on the specific
environment (network and system) the application and the clients live
in.
--
/kinkie
.
--
/kinkie
...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Nothing is fool-proof to a talented fool.
--
/kinkie
.
If you wish to do long-term performance monitoring, your best choices
are munin, cacti or rrdtool.
--
/kinkie
.
If this is true, can anyone suggest me some work arround for it?
~~
Sameer Shinde.
M:- +91 98204 61580
Millions saw the apple fall, but Newton was the one who asked why.
--
/kinkie
, Problem
Can you be a bit more specific about what is the problem? What error
do you get? Without knowing it, it's hard to suggest a fix..
--
/kinkie
, as Digest authentication uses
encryption mechanisms wich are not compatible with those used in AD.
I don't expect that AD would make plaintext-equivalent passwords
available over LDAP...
--
/kinkie
and/or KnowledgeBase.
Please refer to that first.
--
/kinkie
, the more disks the better the performance: squid performance
is usually constrained by the disk head seek times.
See http://wiki.squid-cache.org/SquidFaq/RAID
--
/kinkie
On Sat, Jan 3, 2009 at 11:14 AM, Guido Serassio
guido.seras...@acmeconsulting.it wrote:
Hi Kinkie,
At 18.45 02/01/2009, Kinkie wrote:
Could you try to get a network trace of a successfully authenticated
http transaction?
I would love to see how they do it...
Websense too is using
...@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
/kinkie
a intrnal DNS
server and others from external DNS server. this will ease my task .
many thanks,
Tharanga Abeyseela
--
/kinkie
to be tricky, and will probably
require extensive logging or network sniffing.
Could you try running at debug_options 11,4 ALL,1 ?
You'll then have to sort through the cache.log and see if any further
details emerge from there.
--
/kinkie
201 - 300 of 602 matches
Mail list logo
