Re: [squid-users] Problem with 6.1 squidclient mgr:

2023-08-02 Thread Alex Rousskov
On 7/31/23 09:47, Alex Rousskov wrote: On 7/31/23 06:13, Gérard Parat wrote: I use Squid as a Windows 10 service with Cygwin since 5.7 release. I usually monitor activity with squidclient mgr: but since 6.1 it doesn't work anymore:    * HTTP/1.1 403 Forbidden However, squidclient

Re: [squid-users] Problem with 6.1 squidclient mgr:

2023-07-31 Thread Alex Rousskov
On 7/31/23 06:13, Gérard Parat wrote: I use Squid as a Windows 10 service with Cygwin since 5.7 release. I usually monitor activity with squidclient mgr: but since 6.1 it doesn't work anymore: * HTTP/1.1 403 Forbidden However, squidclient cache_object://localhost/ is working fine. Is

[squid-users] Problem with 6.1 squidclient mgr:

2023-07-31 Thread Gérard Parat
Hi all, I use Squid as a Windows 10 service with Cygwin since 5.7 release. I usually monitor activity with squidclient mgr: but since 6.1 it doesn't work anymore: * HTTP/1.1 403 Forbidden However, squidclient cache_object://localhost/ is working fine. Is there new options to add to

[squid-users] Problem with 6.1 squidclient mgr:

2023-07-31 Thread Gérard Parat
Hi all, I use Squid as a Windows 10 service with Cygwin since 5.7 release. I usually monitor activity with squidclient mgr: but since 6.1 it doesn't work anymore:   * HTTP/1.1 403 Forbidden However, squidclient cache_object://localhost/ is working fine. Is there new options to add to

Re: [squid-users] Problem with wss protocol.

2022-11-01 Thread squid3
On 2022-11-02 06:59, Armando Ramos Roche wrote: Hi all. I was working with squid v3.3 on ubuntu 18.04, after migrating to ubuntu 20.04 a few months ago, squid was updated to version 3.5, currently version 3.5.27. And I have realized that nothing that uses the wss or ws protocol works for

[squid-users] Problem with wss protocol.

2022-11-01 Thread Armando Ramos Roche
Hi all. I was working with squid v3.3 on ubuntu 18.04, after migrating to ubuntu 20.04 a few months ago, squid was updated to version 3.5, currently version 3.5.27. And I have realized that nothing that uses the wss or ws protocol works for me, for example whatsapp, messenger etc... I've searched

Re: [squid-users] Problem caching range requests with range_offset_limit

2022-08-12 Thread osy
I was able to fix the issue by patching Squid to keep the client connection open until the full object is fetched. My changes are detailed in https://gist.github.com/osy/30c5c96d7575efd1d2a2db5e3def0815 On Wed, Aug 10, 2022 at 7:43 PM osy wrote: > > I am trying to cache Azure objects. I have SSL

Re: [squid-users] Problem caching range requests with range_offset_limit

2022-08-10 Thread Alex Rousskov
On 8/10/22 22:43, osy wrote: I am trying to cache Azure objects. I have SSL bump and the following config: maximum_object_size 1000 MB acl azure_storage dstdomain .blob.core.windows.net range_offset_limit -1 azure_storage My expectation is that when a request is made with the Range header,

[squid-users] Problem caching range requests with range_offset_limit

2022-08-10 Thread osy
I am trying to cache Azure objects. I have SSL bump and the following config: maximum_object_size 1000 MB acl azure_storage dstdomain .blob.core.windows.net range_offset_limit -1 azure_storage My expectation is that when a request is made with the Range header, that Squid will request the object

Re: [squid-users] problem in squid log

2021-11-09 Thread Alex Rousskov
On 11/9/21 3:45 AM, Majed Zouhairy wrote: > i have ufdbguard but i don't think i have smp.. The problem, whatever it is, is unlikely to be caused by ufdbguard. My current bet is on access.log record truncation fixed in February 2020 in master/v6[1]. I do not know why that fix has not been

Re: [squid-users] problem in squid log

2021-11-09 Thread Marcus Kool
Hi, I am the author of ufdbGuard and ufdbGuard supports Squid 5.x The SARG error in access.log has nothing to do with ufdbGuard. On 09/11/2021 08:45, Majed Zouhairy wrote: hmmm, this started happening after the last squid update.. i just noticed it is now version 5.2 i have ufdbguard but i

Re: [squid-users] problem in squid log

2021-11-09 Thread Majed Zouhairy
hmmm, this started happening after the last squid update.. i just noticed it is now version 5.2 i have ufdbguard but i don't think i have smp.. the last line of squid conf are url_rewrite_extras "%>a/%>A %un %>rm bump_mode=%ssl::bump_mode sni=\"%ssl::>sni\" referer=\"%{Referer}>h\""

Re: [squid-users] problem in squid log

2021-11-08 Thread Alex Rousskov
On 11/8/21 5:30 AM, Majed Zouhairy wrote: > when i run sarg > > SARG: sarg version: 2.4.0 Jan-16-2020 > SARG: Reading access log file: /var/log/squid/access.log > SARG: Log format identified as "squid log format" for > /var/log/squid/access.log > SARG: The following line read from

[squid-users] problem in squid log

2021-11-08 Thread Majed Zouhairy
when i run sarg SARG: sarg version: 2.4.0 Jan-16-2020 SARG: Reading access log file: /var/log/squid/access.log SARG: Log format identified as "squid log format" for /var/log/squid/access.log SARG: The following line read from /var/log/squid/access.log could not be parsed and is ignored

Re: [squid-users] Problem with upload size limit in squid

2021-02-26 Thread Alex Rousskov
On 2/25/21 8:44 PM, Raj Nagar wrote: > Is there any way by which I can enforce these > limits on other protocols as https? If you want to enforce HTTP request size limits for HTTPS transactions, then you have to bump TLS connections (to see HTTP inside TLS). If you want to enforce connection

Re: [squid-users] Problem with upload size limit in squid

2021-02-25 Thread Raj Nagar
Hi Alex, Thanks for your response. Is there any way by which I can enforce these limits on other protocols as https ? On Thu, Feb 25, 2021, 23:33 Alex Rousskov wrote: > On 2/24/21 11:51 PM, Raj Nagar wrote: > > > I am using squid as forward proxy and want to restrict upload of files > > larger

Re: [squid-users] Problem with upload size limit in squid

2021-02-25 Thread Alex Rousskov
On 2/24/21 11:51 PM, Raj Nagar wrote: > I am using squid as forward proxy and want to restrict upload of files > larger than 1 MB. I have used following configuration for > same: *request_body_max_size 1 MB*. > But this is not working for me and I am able to upload larger files. > Can someone

[squid-users] Problem with upload size limit in squid

2021-02-24 Thread Raj Nagar
Hi, I am using squid as forward proxy and want to restrict upload of files larger than 1 MB. I have used following configuration for same: *request_body_max_size 1 MB*. But this is not working for me and I am able to upload larger files. Can someone please help for same. Thanks in advance --

Re: [squid-users] Problem with tcp_outgoing_address

2021-01-24 Thread Amos Jeffries
On 24/01/21 5:40 am, hlager wrote: Hey guys, i'm trying to get squid working with two outgoing ip adresses, but only one will work, i hope someone can help me. I'm using an ESXI with a Ubuntu VM, i got 3 NICs on it. One Local were the traffic comes in and two which are for the outgoing

[squid-users] Problem with tcp_outgoing_address

2021-01-23 Thread hlager
Hey guys,    i'm trying to get squid working with two outgoing ip adresses, but only one will work, i hope someone can help me.    I'm using an ESXI with a Ubuntu VM, i got 3 NICs on it. One Local were the traffic comes in and two which are for the outgoing traffic. The booth outgoing nics

Re: [squid-users] Problem with access.log and when using SMP

2020-12-22 Thread mikio . kishi
Hi Amos, Thank you for your reply. > What version of Squid are you using? I thought that problem was solved > long ago. I'm using squid-3.5. I would like to know which version was solved. I checked the difference codes of log_file_daemon.cc between squid-3.5 and squid-4.13, however could not

Re: [squid-users] Problem with access.log and when using SMP

2020-12-19 Thread Amos Jeffries
On 19/12/20 8:07 pm, mikio.ki...@gmail.com wrote: Hi, I have the following same problem using access_log. What version of Squid are you using? I thought that problem was solved long ago. In that case, does the following "stdio" logging module also become a workaround to solve the issue

[squid-users] Problem with access.log and when using SMP

2020-12-18 Thread mikio . kishi
Hi, I have the following same problem using access_log. http://squid-web-proxy-cache.1019090.n4.nabble.com/Problem-with-access-log-and-when-using-SMP-td4668524.html In that case, does the following "stdio" logging module also become a workaround to solve the issue ? > stdio Write each log

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-27 Thread Service MV
hy it cannot work unless you specifically desire > to use some haproxy's features for l7 loadbalancing. > > Best regards, > Rafael Akchurin > Diladele B.V. > > -Original Message- > From: squid-users On Behalf > Of Klaus Brandl > Sent: Friday, July 24, 202

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-26 Thread Brett Lymn
On Fri, Jul 24, 2020 at 10:44:34AM +0200, Klaus Brandl wrote: > > but then you have a single point of failure, if your loadbalancer is down, > nothing will work. We need a solution, that each system can work by itself. > So > at the moment we merge the keytabs of each system together, and we

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-25 Thread Markus Moeller
quid-users@lists.squid-cache.org Onderwerp: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication Hi, everybody. I have a SQUID 4.11 compiled on Debian 9.8 with kerberos integration authenticating and browsing without problems: cache.log squid_kerb_auth: User

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread L . P . H . van Belle
nden: vrijdag 24 juli 2020 11:39 > Aan: Brett Lymn; Klaus Brandl > CC: squid-users@lists.squid-cache.org > Onderwerp: Re: [squid-users] Problem with HAProxy + Squid > 4.11 + Kerberos authentication > > Hello Klaus, Brett, all list members, > > This is the scheme with ha

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Service MV
Thanks Amos, Kerberos is really hard to learn for a rookie like me, but you explained it in an excellent and concise way. In my case, the SQUID servers are joined to the domain with their respective SPN and UPN that I mentioned in the msktutil command. And in the case of the Load Balancer HAProxy

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Service MV
Thanks, Brett, for the answer. I did exactly the same thing and it's working for me now. I only have to decrypt how to see the client's IP in SQUID's logs. I will follow your instructions to try to achieve it. Best regards, Gabriel El jue., 23 de jul. de 2020 a la(s) 21:23, Brett Lymn (

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread L . P . H . van Belle
forgot 1 thing. (sorry) # adduser proxyuser winbind_priv or things might not work.   Van: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Namens L.P.H. van Belle Verzonden: vrijdag 24 juli 2020 10:46 Aan: squid-users@lists.squid-cache.org Onderwerp: Re: [squid-users] Problem

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread L . P . H . van Belle
Service MV Verzonden: donderdag 23 juli 2020 17:36 Aan: squid-users@lists.squid-cache.org Onderwerp: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication Hi, everybody. I have a SQUID 4.11 compiled on Debian 9.8 with kerberos integration authenticating and browsing without

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Rafael Akchurin
specifically desire to use some haproxy's features for l7 loadbalancing. Best regards, Rafael Akchurin Diladele B.V. -Original Message- From: squid-users On Behalf Of Klaus Brandl Sent: Friday, July 24, 2020 10:45 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Rafael Akchurin
- From: squid-users On Behalf Of Brett Lymn Sent: Friday, July 24, 2020 2:23 AM To: Klaus Brandl Cc: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication On Thu, Jul 23, 2020 at 06:07:39PM +0200, Klaus Brandl wrote

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-24 Thread Klaus Brandl
Hi Brett, but then you have a single point of failure, if your loadbalancer is down, nothing will work. We need a solution, that each system can work by itself. So at the moment we merge the keytabs of each system together, and we are able to takeover the addresses of the other systems. Then

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Amos Jeffries
On 24/07/20 5:09 am, Service MV wrote: > Hi Klaus, > I think something similar. But I understand that you can use the > Kerberos delegation in AD. That's partly why I'm not convinced by the > documentation I read, which tells me to create a user account in Active > Directory. And I don't

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Brett Lymn
On Thu, Jul 23, 2020 at 06:07:39PM +0200, Klaus Brandl wrote: > > But if anyone knows a solution, i will spread my ears :) > What we do is: 1) create a user account in AD that will be used for the HA front end, set a password and export the keytab for this user 2) Use ktadmin to import the

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Service MV
Hi Klaus, I think something similar. But I understand that you can use the Kerberos delegation in AD. That's partly why I'm not convinced by the documentation I read, which tells me to create a user account in Active Directory. And I don't understand what a user account has to do here. Maybe the

Re: [squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Klaus Brandl
Hi Gabriel, same problem here on our HA systems. I think, this is caused by kerberos overall, the tickets are always bound to the hosts realname and address, look at "klist" on your client, and only exactly this name could be used as proxy entry. But if anyone knows a solution, i will spread

[squid-users] Problem with HAProxy + Squid 4.11 + Kerberos authentication

2020-07-23 Thread Service MV
Hi, everybody. I have a SQUID 4.11 compiled on Debian 9.8 with kerberos integration authenticating and browsing without problems: cache.log squid_kerb_auth: User some.user authenticated access.log 10.10.10.203 TCP_TUNNEL/200 5264 CONNECT update.googleapis.com:443 some.user

Re: [squid-users] Problem with squid proxy authentication configuration

2020-06-11 Thread Amos Jeffries
On 12/06/20 12:29 am, Amiq Nahas wrote: > On Wed, Jun 10, 2020 at 8:07 PM Amos Jeffries wrote: >> >> On 10/06/20 9:26 pm, Amiq Nahas wrote: >>> Hi Guys, >>> >>> I am trying to configure squid so as to have user proxy >>> authentication, below is how my squid.conf file looks like: >>> >>> - >>>

Re: [squid-users] Problem with squid proxy authentication configuration

2020-06-11 Thread Amiq Nahas
On Wed, Jun 10, 2020 at 6:48 PM Alex Rousskov wrote: > > On 6/10/20 5:26 AM, Amiq Nahas wrote: > > > http_port 3128 > > > > I have configured 127.0.0.1:3128 as manual proxy in firefox. > > > > But when I try to connect to internet it displays "The proxy server is > > refusing connections" > >

Re: [squid-users] Problem with squid proxy authentication configuration

2020-06-11 Thread Amiq Nahas
On Wed, Jun 10, 2020 at 8:07 PM Amos Jeffries wrote: > > On 10/06/20 9:26 pm, Amiq Nahas wrote: > > Hi Guys, > > > > I am trying to configure squid so as to have user proxy > > authentication, below is how my squid.conf file looks like: > > > > - > > acl SSL_ports port 443 > > acl Safe_ports

Re: [squid-users] Problem with squid proxy authentication configuration

2020-06-10 Thread Amos Jeffries
On 10/06/20 9:26 pm, Amiq Nahas wrote: > Hi Guys, > > I am trying to configure squid so as to have user proxy > authentication, below is how my squid.conf file looks like: > > - > acl SSL_ports port 443 > acl Safe_ports port 80# http > acl Safe_ports port 21# ftp > acl

Re: [squid-users] Problem with squid proxy authentication configuration

2020-06-10 Thread Alex Rousskov
On 6/10/20 5:26 AM, Amiq Nahas wrote: > http_port 3128 > I have configured 127.0.0.1:3128 as manual proxy in firefox. > > But when I try to connect to internet it displays "The proxy server is > refusing connections" Does your Squid run on the same machine as your browser? If yes, are there

[squid-users] Problem with squid proxy authentication configuration

2020-06-10 Thread Amiq Nahas
Hi Guys, I am trying to configure squid so as to have user proxy authentication, below is how my squid.conf file looks like: - acl SSL_ports port 443 acl Safe_ports port 80# http acl Safe_ports port 21# ftp acl Safe_ports port 443# https acl Safe_ports port 70

Re: [squid-users] Problem with Debugging Useragent

2020-05-06 Thread Amos Jeffries
On 7/05/20 4:11 am, Ahmad Alzaeem wrote: > Hello Floks , > > > We have squid 4.x > > We need to debug the user agents being sent from our local network . > > We added : > logformat useragent %>a [%tl] "%{User-Agent}>h" > access_log stdio:/var/log/squid/${service_name}-useragent.log useragent

Re: [squid-users] Problem with ssl_choose_client_version:inappropriate fallback on some sites when using TLS1.2

2019-11-20 Thread John Sweet-Escott
Hi Tanner Unfortunately not. We have tried everything we can think of, plus suggested items from this list, with no success. If you figure it out let me know. Many thanks John Sent from my iPhone > On 20 Nov 2019, at 21:34, tannmann wrote: > > Hey John, > > It looks like we have a very

Re: [squid-users] Problem with ssl_choose_client_version:inappropriate fallback on some sites when using TLS1.2

2019-11-20 Thread tannmann
Hey John, It looks like we have a very similar setup and configuration as you, and we are experiencing the same problem. Have you been able to figure out a way to get connections to google to work with Squid 4.8 as a transparent proxy? Thanks, Tanner -- Sent from:

Re: [squid-users] Problem webpagge filter - acl & http_access

2019-10-16 Thread ndoigny
Hi, I tested with an acl .eurosport.com* and garagegardi.be* who aren't https and it's working. I see that for https pages, I need a root certificate that will be exported to all machines. Thank you for you help. Nicolas -- Sent from:

Re: [squid-users] Problem webpagge filter - acl & http_access

2019-10-16 Thread Rafał Stanilewicz
Most likely your browser redirects you to HTTPS, instead of HTTP, so what you need is peek and splice. On Wed, 16 Oct 2019 at 06:52, Vacheslav wrote: > > I too wanted to block, but it was youtube, and eventually the best way > to do it was squid + ufdbguard > > On Tue, 2019-10-15 at 13:03 -0500,

Re: [squid-users] Problem webpagge filter - acl & http_access

2019-10-15 Thread Vacheslav
I too wanted to block, but it was youtube, and eventually the best way to do it was squid + ufdbguard On Tue, 2019-10-15 at 13:03 -0500, ndoigny wrote: > Hi All, > > I did a Squid basic configuration on the port 3128. > > The server proxy works correcly and I can browser from a client > machine

[squid-users] Problem webpagge filter - acl & http_access

2019-10-15 Thread ndoigny
Hi All, I did a Squid basic configuration on the port 3128. The server proxy works correcly and I can browser from a client machine when I configure the proxy configuration. But when I try to do some web filtering on some sites, I always manage to access it I created a txt file 'blocked_sites'

Re: [squid-users] Problem with ssl_choose_client_version:inappropriate fallback on some sites when using TLS1.2

2019-09-18 Thread John
Hi Amos Thank you for your help. On Tue, 17 Sep 2019 at 07:26, Amos Jeffries wrote: > ... > > Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9) > > I suspect it might have something to do with these ECDSA keys. > > You do not have Elliptic-Curves enabled on the https_port

Re: [squid-users] Problem with ssl_choose_client_version:inappropriate fallback on some sites when using TLS1.2

2019-09-17 Thread Amos Jeffries
On 15/09/19 10:41 pm, John Sweet-Escott wrote: > Hi All > > We are trying to run Squid 4.8, compiled with OpenSSL 1.1.1 (see [1]) on > Ubuntu 18.04 as a transparent proxy for the purpose of egress filtering > of HTTPS traffic using SNI (see config in [2]). It it works correctly > when contacting

[squid-users] Problem with ssl_choose_client_version:inappropriate fallback on some sites when using TLS1.2

2019-09-15 Thread John Sweet-Escott
Hi All We are trying to run Squid 4.8, compiled with OpenSSL 1.1.1 (see [1]) on Ubuntu 18.04 as a transparent proxy for the purpose of egress filtering of HTTPS traffic using SNI (see config in [2]). It it works correctly when contacting some addresses (e.g. https://www.ubuntu.com) but not others

Re: [squid-users] problem compiling squid 4 on ubuntu 18.04

2019-02-27 Thread Rafael Akchurin
Of Alex Gutiérrez Martínez Sent: Wednesday, 27 February 2019 22:48 To: squid-users@lists.squid-cache.org Subject: [squid-users] problem compiling squid 4 on ubuntu 18.04 Hello comunity, can someone be so nice to tell me what i´m doing wrong Im compiling squid 4.5 on ubuntu 18.04

Re: [squid-users] problem compiling squid 4 on ubuntu 18.04

2019-02-27 Thread Amos Jeffries
On 28/02/19 10:47 am, Alex Gutiérrez Martínez wrote: > Hello comunity, can someone be so nice to tell me what i´m doing wrong > > > Im compiling squid 4.5 on ubuntu 18.04 > ... > > > im getting this error > > > error: NTLM auth helper smb_lm ... not found >

[squid-users] problem compiling squid 4 on ubuntu 18.04

2019-02-27 Thread Alex Gutiérrez Martínez
Hello comunity, can someone be so nice to tell me what i´m doing wrong Im compiling squid 4.5 on ubuntu 18.04 this are the dependency i have installed apt-get -y install libcppunit-dev libsasl2-dev libxml2-dev libkrb5-dev libdb-dev libnetfilter-conntrack-dev libexpat1-dev libcap2-dev

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Amos Jeffries
On 14/02/19 1:37 am, Ahmad, Sarfaraz wrote: > Did you add them to “safe_ports” acl ? ( assuming you have one ) > Port 1935 is already part of the Safe_ports ACL by default. What it is not part of is the SSL_Ports ACL which prohibits almost all ports having CONNECT tunnels opened. If the Flash

Re: [squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Ahmad, Sarfaraz
y 13, 2019 5:56 PM To: squid-users@lists.squid-cache.org Subject: [squid-users] Problem rtmp traffic through Squid Hello! In our organization, we use squid proxy server. And we found a problem with viewing webinars that run on adobe Flash. Network engineers found out that rtmp traffic on port 193

[squid-users] Problem rtmp traffic through Squid

2019-02-13 Thread Герасимов Никита Вячеславович
Hello! In our organization, we use squid proxy server. And we found a problem with viewing webinars that run on adobe Flash. Network engineers found out that rtmp traffic on port 1935 bypasses the proxy server, which is specified in the browser settings. In this connection, the site does not

Re: [squid-users] Problem with kerb/ntlm authentication

2018-09-18 Thread Yanier Salazar Sanchez
, September 14, 2018 13:57 To: squid-users@lists.squid-cache.org Subject: [squid-users] Problem with kerb/ntlm authentication Sorry for my bad english. This is the scenario I have ubuntu 18.04.01 (with las update) with squid 4.2-2, samba and winbind 4.7.6, AD on Windows Server 2012 R2/2016

[squid-users] Problem with kerb/ntlm authentication

2018-09-14 Thread Yanier Salazar Sanchez
Sorry for my bad english. This is the scenario I have ubuntu 18.04.01 (with las update) with squid 4.2-2, samba and winbind 4.7.6, AD on Windows Server 2012 R2/2016 with the las update, Client with windows 10 1709 with the las update, firefox 60.2.0esr, google chrome 61.0.3163.79, firefox

[squid-users] Problem with kerb/ntlm authentication

2018-09-14 Thread Yanier Salazar Sanchez
Sorry for my bad english. This is the scenario I have ubuntu 18.04.01 (with las update) with squid 4.2-2, samba and winbind 4.7.6, AD on Windows Server 2012 R2/2016 with the las update, Client with windows 10 1709 with the las update, firefox 60.2.0esr, google chrome 61.0.3163.79, firefox

Re: [squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread erdosain9
Thanks for your time! Know is working fine. a little and stupid question where i can found the start script of squid??? This is a Centos 7. I want put this KRB5RCACHETYPE=none export KRB5RCACHETYPE [root@squid etc]# cat /usr/lib/systemd/system/squid.service ## Copyright (C) 1996-2015 The

Re: [squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread Flashdown
Also on a specific interval windows will automatically refresh kerberos tickets in the background but when depends on your domain settings and I am unsure about the default interval. Am 5. Februar 2018 17:46:29 MEZ schrieb Enrico Heine : >Only users that can't use the

Re: [squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread Enrico Heine
Only users that can't use the proxy need to do it. Am 5. Februar 2018 17:43:58 MEZ schrieb Enrico Heine : >This is maybe because the users have a old kerberos ticket and need to >renew it. So simple solution for them is to log off and logon again to >their windows PC or

Re: [squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread Enrico Heine
This is maybe because the users have a old kerberos ticket and need to renew it. So simple solution for them is to log off and logon again to their windows PC or they can close the browsers and tools that need to authenticate against the proxy afterwards they should lock and directly unlock

Re: [squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread erdosain9
Ok. Thanks Know the ticket is fine, and is working (people are going throug internet and i see in access.log there user names) but... im having this error in the log. 2018/02/05 12:56:46 kid1| ERROR: Negotiate Authentication validating user. Result: {result=BH, notes={message:

Re: [squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread Flashdown
I am answering to fast, but I am writing in my little break, so sorry for that :D forget my last mail regarding "to call it correctly" that was misleading and wrong. sure you are talking about the HTTP SPN which have the same KVNO. So if you want to get rid of it delete the computer object, as

[squid-users] Problem with Kerberos ticket keytab

2018-02-05 Thread erdosain9
Hi to all. The squid was working fine, but i made a mistake and... delete the proxy.keytab. I try to do it again, but make a mistake in the syntax wrong syntax (the real name is not squidproxy.domain.lan is squid.domain.lan): msktutil -c -b "CN=COMPUTERS" -s HTTP/squidproxy.domain.lan -k

Re: [squid-users] Problem loading Facebook profiles

2018-01-12 Thread Antony Stone
On Friday 12 January 2018 at 17:39:09, Roberto Carna wrote: > Dear, I have a Squid 3.5.27 proxy server with Squidguard in > transparent mode, for HTTP and HTTPS traffic. Please show us the Squid configuration file (omitting comments and blank lines) - that will show us what you've asked Squid

[squid-users] Problem loading Facebook profiles

2018-01-12 Thread Roberto Carna
Dear, I have a Squid 3.5.27 proxy server with Squidguard in transparent mode, for HTTP and HTTPS traffic. Everything is OK, except when I access Facebook and select a profile from any user: in this case, the profile load the name, picture, but doesn't load the other data at all (pictures,

Re: [squid-users] Problem using auth digest

2017-12-06 Thread Amos Jeffries
On 07/12/17 03:59, aismel.valle wrote: Hi guys, well i implement the auth digest and work's fine only with the browser, when i config the internet download manager for download files have problems always show me the form authentication and don't accept the credentials i know the data is fine

[squid-users] Problem using auth digest

2017-12-06 Thread aismel . valle
Hi guys, well i implement the auth digest and work's fine only with the browser, when i config the internet download manager for download files have problems always show me the form authentication and don't accept the credentials i know the data is fine because when i use the seem credentials in

Re: [squid-users] Problem with squid and acces to localhost ipv6

2017-11-09 Thread Amos Jeffries
On 10/11/17 02:58, Nicolás Hervé wrote: Hi, I have a problem with some users who use pgadmin v4, sometimes a "connection to :: 1 failed" error appears when they enter http: // localhost: 55501 / the system returns (111) connection refused. Why can this be happening? and how can I solve it?

[squid-users] Problem with squid and acces to localhost ipv6

2017-11-09 Thread Nicolás Hervé
Hi, I have a problem with some users who use pgadmin v4, sometimes a "connection to :: 1 failed" error appears when they enter http: // localhost: 55501 / the system returns (111) connection refused. Why can this be happening? and how can I solve it? ___

Re: [squid-users] problem squid squidguard with outlook 2016

2017-11-07 Thread Antony Stone
On Tuesday 07 November 2017 at 14:34:36, rmohammed wrote: > I have a problem with outlook 2016 in my office, > > When i activate squid and squidguard, Is the behaviour the same if you use Squid without Squidguard? > outlook stop to receive and send emails, > > can anyone help me plz? Tell us

[squid-users] problem squid squidguard with outlook 2016

2017-11-07 Thread rmohammed
I have a problem with outlook 2016 in my office, When i activate squid and squidguard, outlook stop to receive and send emails, can anyone help me plz? thanks -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html

Re: [squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7

2017-07-20 Thread Eliezer Croitoru
: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Kurczewski, Bartłomiej (WP.PL) [mailto:iz...@poczta.wp.pl] Sent: Thursday, July 20, 2017 10:20 To: Eliezer Croitoru <elie...@ngtech.co.il>; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Problem with

Re: [squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7

2017-07-20 Thread WP.PL
gt; Sent: Tuesday, July 18, 2017 15:56 > To: squid-users@lists.squid-cache.org > Subject: [squid-users] Problem with login to website by Squid web proxy > 3.5.20 on Centos 7 > > Hi, > I have a problem to login to one website (http://intouch.techdata.com) > using Squid 3.5.2

Re: [squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7

2017-07-19 Thread Amos Jeffries
On 20/07/17 06:08, Eliezer Croitoru wrote: Hey iziz1, Can you try to add squid.conf the next and see if it affects anything: forwarded_for delete via off http://www.squid-cache.org/Doc/config/via/ http://www.squid-cache.org/Doc/config/forwarded_for/ And see if it changes anything? Er, try

Re: [squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7

2017-07-19 Thread Eliezer Croitoru
-cache.org Subject: [squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7 Hi, I have a problem to login to one website (http://intouch.techdata.com) using Squid 3.5.20 on Centos 7 with default Squid configuration, which is acting as web proxy (non-transparent) on 3128 port

[squid-users] Problem with login to website by Squid web proxy 3.5.20 on Centos 7

2017-07-18 Thread WP.PL
Hi, I have a problem to login to one website (http://intouch.techdata.com) using Squid 3.5.20 on Centos 7 with default Squid configuration, which is acting as web proxy (non-transparent) on 3128 port in my network: -- # #

Re: [squid-users] Problem with Squid3 Authentication ( after sambaupgrades )

2017-05-23 Thread L . P . H . van Belle
> [mailto:squid-users-boun...@lists.squid-cache.org] Namens > Amos Jeffries > Verzonden: maandag 22 mei 2017 22:46 > Aan: squid-users@lists.squid-cache.org > Onderwerp: Re: [squid-users] Problem with Squid3 Authentication > > On 23/05/17 02:15, Marcio Demetrio Bacci wrot

Re: [squid-users] Problem with Squid3 Authentication

2017-05-22 Thread Amos Jeffries
On 23/05/17 02:15, Marcio Demetrio Bacci wrote: I have migrated of Samba 4.2.1 to Samba 4.6.3 as DC, but now my Squid authentication doesn't work. In samba 4.2.1 is working properly. This is my authentication block: auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b

[squid-users] Problem with Squid3 Authentication

2017-05-22 Thread Marcio Demetrio Bacci
I have migrated of Samba 4.2.1 to Samba 4.6.3 as DC, but now my Squid authentication doesn't work. In samba 4.2.1 is working properly. This is my authentication block: auth_param basic program /usr/lib/squid3/basic_ldap_auth -R -b DC=empresa,DC=com,DC=br -D

Re: [squid-users] Problem with basic_ldap_auth

2017-03-30 Thread Max Giesbert
Thank you so much! That did the trick. You made my day :-D Amos Jeffries schrieb am Mi., 29. März 2017 um 03:08 Uhr: > On 29/03/2017 2:54 a.m., Max Giesbert wrote: > > Hi everyone, > > > > I am running Squid from the repos on Ubuntu 16.04. I can login to Squid > > using

Re: [squid-users] Problem with basic_ldap_auth

2017-03-28 Thread Amos Jeffries
On 29/03/2017 2:54 a.m., Max Giesbert wrote: > Hi everyone, > > I am running Squid from the repos on Ubuntu 16.04. I can login to Squid > using basic_nsca_auth without problems. When I replace the according line > using basic_ldap_auth I am unable to login. The browser keeps requesting > the user

[squid-users] Problem with basic_ldap_auth

2017-03-28 Thread Max Giesbert
Hi everyone, I am running Squid from the repos on Ubuntu 16.04. I can login to Squid using basic_nsca_auth without problems. When I replace the according line using basic_ldap_auth I am unable to login. The browser keeps requesting the user credentials over and over again. If I run the command

Re: [squid-users] Problem building Squid4

2017-01-12 Thread matg2s
Hi Rafael, I actually stumbled on your project (and I've gotta say it's very impressive and well made/documented) in the past. I did try adapting it to Squid 4.0 but wasn't able to. The dsc file expects a "3.5.23" tar.gz, and then there some problems with the patches and other errors so I gave up

Re: [squid-users] Problem building Squid4

2017-01-12 Thread Rafael Akchurin
: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of matg2s Sent: Thursday, January 12, 2017 8:59 AM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Problem building Squid4 Hi, Ok, I'm not sure why - but it seems that using the following configure fixed

Re: [squid-users] Problem building Squid4

2017-01-12 Thread matg2s
Hi, Ok, I'm not sure why - but it seems that using the following configure fixed this: ./configure --disable-external-acl-helpers --enable-ssl-crtd --with-openssl --datadir=/usr/share/squid --sysconfdir=/etc/squid --libexecdir=/usr/lib/squid --mandir=/usr/share/man --with-swapdir=/var/spool/squid

Re: [squid-users] Problem building Squid4

2017-01-10 Thread Eliezer Croitoru
-cache.org Subject: [squid-users] Problem building Squid4 Hey, I'm trying to compile Squid 4 (on Ubuntu 14/16) and am getting the following error: In file included from ../../src/base/AsyncCall.h:14:0, from ../../src/comm/IoCallback.h:12, from ../../src/comm.h:12

Re: [squid-users] Problem building Squid4

2017-01-08 Thread Eliezer Croitoru
-boun...@lists.squid-cache.org] On Behalf Of matg2s Sent: Sunday, January 8, 2017 11:32 AM To: squid-users@lists.squid-cache.org Subject: [squid-users] Problem building Squid4 Hey, I'm trying to compile Squid 4 (on Ubuntu 14/16) and am getting the following error: In file included from ../../src

Re: [squid-users] Problem building Squid4

2017-01-08 Thread Alex Rousskov
On 01/08/2017 02:31 AM, matg2s wrote: > I'm trying to compile Squid 4 (on Ubuntu 14/16) and am getting the following > error: Builds OK here with similar SSL-related ./configure options. Could be an OpenSSL library version incompatibility or a similar problem. If you are building with OpenSSL

[squid-users] Problem building Squid4

2017-01-08 Thread matg2s
Hey, I'm trying to compile Squid 4 (on Ubuntu 14/16) and am getting the following error: In file included from ../../src/base/AsyncCall.h:14:0, from ../../src/comm/IoCallback.h:12, from ../../src/comm.h:12, from ../../src/client_side.h:16,

Re: [squid-users] problem authentication ntlm with squid 3.5.21

2017-01-03 Thread Amos Jeffries
On 2017-01-04 03:14, ama...@tin.it wrote: Hello I upgrade squid from 3.4.9-20141203-r13193 to 3.5.21-20160908- r14081 and I have a problem with authentication to ntlm in a transparent configuration: the squid doesn't switch to https and so it doesn't authentication This doesn't compute. Your

[squid-users] problem authentication ntlm with squid 3.5.21

2017-01-03 Thread ama...@tin.it
Hello I upgrade squid from 3.4.9-20141203-r13193 to 3.5.21-20160908- r14081 and I have a problem with authentication to ntlm in a transparent configuration: the squid doesn't switch to https and so it doesn't authentication In my older version the configuration it so: auth_param basic children

Re: [squid-users] Problem with ssl_crtd

2016-12-29 Thread Eduardo Carneiro
I admit that I am sad because it is a bug and has not been solved yet. In this way, I will not be able to use this feature while this bug has not been solved because, if I enable ssl-bump on my port, the squid sporadically stops. Here is the important part to us, of my squid.conf. I use url

  1   2   3   4   5   6   7   8   9   10   >