[squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread projpr...@virgilio.it
Hi, i had succesfully used until today squid on a SLES 10 machine with ldap authentication against active directory 2003. The company wanted to make an update to active directory 2008 R2: now it looks like it does not work properly. On user side the login window pops up and, once entered the

RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread Joseph L. Casale
On the cache.log of squid i can see a error message could not bind to bindn server can´t contact ldap server. Could someone help me to let it work? Probably not without seeing your config and knowing your AD setup. If you upgraded, has your ldap topology remained exactly the same? Were you

[squid-users] Missing content-length header for POST and PUT

2011-01-20 Thread David Gubler
Hi list, We're testing Squid (3.1.6) as a reverse proxy to accelerate our web site. Now we have discovered a major issue: Squid does not accept empty POSTs (and probably PUTs) that don't have a content-length header, and returns HTTP/411. All works fine if we bypass the proxy. Since this is

Re: [squid-users] Missing content-length header for POST and PUT

2011-01-20 Thread Ralf Hildebrandt
* David Gubler d...@doodle.com: Hi list, We're testing Squid (3.1.6) as a reverse proxy to accelerate our web site. Now we have discovered a major issue: Squid does not accept empty POSTs (and probably PUTs) that don't have a content-length header, and returns HTTP/411. All works fine if we

[squid-users] Expect Request headers

2011-01-20 Thread Rolf Loudon
Hello I have some software that is producing repeated TCP_MISS/417 errors in the logs and is failing to connect to the server I have found previous discussions that show the software is not behaving correctly to the extent that after the proxy sends back the 417 - expectation failed, the

[squid-users] R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread projpr...@virgilio.it
Thanks for reply. No anonimous bind: there´s a user to bind ldap server. As I said: with AD 2003 was working well, now with AD2008 is not working squid version 2.7 stable6 configuration (names are changed): auth_param basic program usr/sbin/squid_ldap_auth -d -v 3 -s sub -b dc=example,

Re: [squid-users] Missing content-length header for POST and PUT

2011-01-20 Thread David Gubler
On 20.01.2011 14:24, Ralf Hildebrandt wrote: * David Gublerd...@doodle.com: Hi list, We're testing Squid (3.1.6) as a reverse proxy to accelerate our web site. Now we have discovered a major issue: Squid does not accept empty POSTs (and probably PUTs) that don't have a content-length header,

Re: [squid-users] NONE/501 in an https:// POST request

2011-01-20 Thread Ralf Hildebrandt
* Amos Jeffries squ...@treenet.co.nz: 1) It's https:// -- why am I seeing the URL? Usually I'm just seeing CONNECT and a target IP with HTTPS! * Possibly they were using some non-SSL capable tool or web app. * Maybe you have a mystery child proxy using ssl-bump feature. Either way it

Re: [squid-users] Intermittent SquidKerbAuth 'Cannot allocate memory'

2011-01-20 Thread Nick Cairncross
On 07/01/2011 12:37, Nick Cairncross nick.cairncr...@condenast.co.uk wrote: From time to time my users experience constant unsatisfiable prompts from squid. Cache.log reports: 2011/01/07 12:04:53| authenticateNegotiateHandleReply: Error validating user via Negotiate. Error returned 'BH

Re: [squid-users] Why is Cache-Control: max-age added to forwarded HTTP requests?

2011-01-20 Thread John Craws
Hi, Squid versions 3.1.9/3.1.10. Thank you, John Craws On Wed, Jan 19, 2011 at 9:21 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 20/01/11 08:29, John Craws wrote: Hi, After observing this, I have been going through RFC 2616, the squid documentation, mailing list archives and various

Re: [squid-users] Missing content-length header for POST and PUT

2011-01-20 Thread Amos Jeffries
On 21/01/11 03:53, David Gubler wrote: On 20.01.2011 14:24, Ralf Hildebrandt wrote: * David Gublerd...@doodle.com: Hi list, We're testing Squid (3.1.6) as a reverse proxy to accelerate our web site. Now we have discovered a major issue: Squid does not accept empty POSTs (and probably PUTs)

[squid-users] Avoiding incorrect URL interception

2011-01-20 Thread Roberto
Hi, I've just installed squid in a debian 5 machine, and most of what I want is working, but I´m having one problem. When someone searches for an URL that does not exist, most modern browser get the DNS error and try searching google (or bing, or whatever). But, with squid installed, the

[squid-users] Setting up a whitelist

2011-01-20 Thread Tristan Sexton
Hello, I've had some issues trying to setup Squid through Webmin for a whitelist and I just haven't been able to get it right. What I'm trying to do is setup a proxy server for our home office and stores using a whitelist to filter what websites the stores can visit. However, every time we launch

RE: [squid-users] R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread Joseph L. Casale
As I said: with AD 2003 was working well, now with AD2008 is not working That doesn’t help us, so you upgraded the domain? Regardless, you're not auth'ing to the same server so something changed. auth_param basic program usr/sbin/squid_ldap_auth -d -v 3 -s sub -b dc=example, dc=org -D

Re: [squid-users] Expect Request headers

2011-01-20 Thread Amos Jeffries
On 21/01/11 02:48, Rolf Loudon wrote: Hello I have some software that is producing repeated TCP_MISS/417 errors in the logs and is failing to connect to the server I have found previous discussions that show the software is not behaving correctly to the extent that after the proxy sends back

Re: [squid-users] Avoiding incorrect URL interception

2011-01-20 Thread Amos Jeffries
On 21/01/11 06:03, Roberto wrote: Hi, I've just installed squid in a debian 5 machine, and most of what I want is working, but I´m having one problem. When someone searches for an URL that does not exist, most modern browser get the DNS error and try searching google (or bing, or whatever).

[squid-users] Re: Intermittent SquidKerbAuth 'Cannot allocate memory'

2011-01-20 Thread Markus Moeller
If you have time and interest you can try the following http://www.web-polygraph.org/pipermail/users/2011-January/64.html to test performance. Regards Markus Nick Cairncross nick.cairncr...@condenast.co.uk wrote in message news:c95e034b.55180%nick.cairncr...@condenast.co.uk... On

Re: [squid-users] Setting up a whitelist

2011-01-20 Thread Eliezer
well if you can send us your configuration file we can try to help you. give us a list of sites you want to access and maybe we can help you compose acls and the config file. On 20/01/2011 19:05, Tristan Sexton wrote: Hello, I've had some issues trying to setup Squid through Webmin for a

Re: [squid-users] Setting up a whitelist

2011-01-20 Thread Amos Jeffries
On 21/01/11 06:05, Tristan Sexton wrote: Hello, I've had some issues trying to setup Squid through Webmin for a whitelist and I just haven't been able to get it right. What I'm trying to do is setup a proxy server for our home office and stores using a whitelist to filter what websites the

[squid-users] Expect Request headers

2011-01-20 Thread Rolf Loudon
Hello I have some software that is producing repeated TCP_MISS/417 errors in the logs and is failing to connect to the server I have found previous discussions that show the software is not behaving correctly to the extent that after the proxy sends back the 417 - expectation failed, the

Re: [squid-users] Expect Request headers

2011-01-20 Thread Amos Jeffries
see previous answers.

[squid-users] R: RE: [squid-users] R: RE: [squid-users] Squid - ldap auth against active directory 2008 R2

2011-01-20 Thread projpr...@virgilio.it
Ok, let´s start with a general question: does squid work with ldap auth and active directory 2008 R2??? is there someone that has kind of experience with that??? Thanks jcasale: yes we upgraded the domain from 2003 to 2008 R2, all domain controller (2 per each subdomain exactely like before