RE: [squid-users] Does any cache in a proxy chain but the last one need to resolve URLs?

2011-05-02 Thread Jannis Kafkoulas
Thanks for the hint! I'll check it too. I think, we should also replace the ip dsts within all of the intermediate caches by domain names thus saving all of the unnecessary dns lookups (about 80% -- Internet). Yes, we have a local caching dns. - Ursprüngliche Mail Von: Eliezer

[squid-users] more that 1 port en accel squid3

2011-05-02 Thread F . Javier Gómez
hello: i want to accept request en two or more ports in reverse mode. 80, 8080 and 8081 is that configuration correct? : ... http_port 80 vhost http_port 8080 vhost http_port 8081 vhost acl Safe_ports 80 acl Safe_ports 8080 acl Safe_ports 8081 cache_peer 1.1.1.1 parent 80 0

Re: [squid-users] Re: Re: Re: Help me configure Kerberos Authentication

2011-05-02 Thread Go Wow
I changed my approach a lil bit and swicthed to centos from ubuntu hehe. I installed centos and configured kerberos/squid as mentioned in squid-cache kerberos guide, I used msktutil to create the keytab file. On the windows server I checked the machine, it was listed as a workstation I went on

[squid-users] Re: Re: Re: Re: Help me configure Kerberos Authentication

2011-05-02 Thread Markus Moeller
You can use adsiedit.msc or any ldapbrowser. Can you send me your verbose output from the msktutil command. Markus Go Wow gow...@gmail.com wrote in message news:BANLkTin0odmNEAdKnL=4-omzqacveat...@mail.gmail.com... I will check that and inform you. But how did you troubleshoot that the

[squid-users] Re: Re: Re: Re: Help me configure Kerberos Authentication

2011-05-02 Thread Markus Moeller
Hi Go, There is no need to use delegation and you must not enable delegation as it creates a risk that your squid system can create tickets for other users (e.g. impersonate another user). Negotiate handles both Kerberos and NTLM authentication. If Kerberos is setup correctly it is the

Re: [squid-users] Re: Re: Re: Re: Help me configure Kerberos Authentication

2011-05-02 Thread Go Wow
Hi Markus, Thanks for your reply. Is it safe to use negotiate wrapper with squid 3.1.8? I didnt add delegation to that system, I have just given full permisions to admin user and that computer. Does it matter? Regards On 2 May 2011 17:56, Markus Moeller hua...@moeller.plus.com wrote: Hi Go,

[squid-users] Re: Re: Re: Re: Re: Help me configure Kerberos Authentication

2011-05-02 Thread Markus Moeller
You don't have to give permissions to the admin user. Any user could own and manage that account. If I remember right the wrapper should work with 3.1 Markus Go Wow gow...@gmail.com wrote in message news:BANLkTikz_WCcVfbNAin==uhu-fenpgq...@mail.gmail.com... Hi Markus, Thanks for your reply.

Re: [squid-users] Does any cache in a proxy chain but the last one need to resolve URLs?

2011-05-02 Thread Eliezer Croitoru
On 02/05/2011 12:32, Jannis Kafkoulas wrote: Thanks for the hint! I'll check it too. I think, we should also replace the ip dsts within all of the intermediate caches by domain names thus saving all of the unnecessary dns lookups (about 80% -- Internet). i dont know about the amount of

Re: [squid-users] Mesh

2011-05-02 Thread igor rocha
See, I'm configuring my squid.conf intending it to run in mesh: cache_peer 192.168.15.200 parent 3128 0 no-query round robin cache_peer 192.168.15.201 parent 3128 0 no-query round robin cache_peer 192.168.15.202 parent 3128 0 no-query round robin cache_peer 192.168.15.203 parent 3128 0 no-query

Re: [squid-users] Mesh

2011-05-02 Thread Amos Jeffries
On Mon, 2 May 2011 18:07:53 -0300, igor rocha wrote: See, I'm configuring my squid.conf intending it to run in mesh: cache_peer 192.168.15.200 parent 3128 0 no-query round robin cache_peer 192.168.15.201 parent 3128 0 no-query round robin cache_peer 192.168.15.202 parent 3128 0 no-query round

Re: [squid-users] Mesh

2011-05-02 Thread igor rocha
hello, no, this is not the problem, it was a typo, I checked in my file and it are with -, ie to round-robin . 2011/5/2 Amos Jeffries squ...@treenet.co.nz: On Mon, 2 May 2011 18:07:53 -0300, igor rocha wrote: See, I'm configuring my squid.conf intending it to run in mesh: cache_peer

[squid-users] Squid support ssl .pfs cert?

2011-05-02 Thread Gary K
Hi all, Is squid support .pfs cert or only pem cert? Regards, Gary

Re: [squid-users] Squid support ssl .pfs cert?

2011-05-02 Thread Amos Jeffries
On Tue, 3 May 2011 09:08:20 +0800, Gary K wrote: Hi all, Is squid support .pfs cert or only pem cert? Regards, Gary Only PEM. Amos

Re: [squid-users] squid config help required

2011-05-02 Thread Colin Coe
Is anyone using squirm successfully with squid v3.1.x? I can't get anything to match Questions - Does the url_rewrite_program work correctly in 3.1.4? - At what stage are URLs passed to url_rewrite_program? - I believe I need to rewrite in both directions, can I do this with url_rewrite_program?

Re: [squid-users] squid config help required

2011-05-02 Thread Amos Jeffries
On Tue, 3 May 2011 10:13:28 +0800, Colin Coe wrote: Is anyone using squirm successfully with squid v3.1.x? I can't get anything to match Yes, several. Not me, I just know of people. Questions - Does the url_rewrite_program work correctly in 3.1.4? Yes. The only bugs are around invalid

Re: [squid-users] squid config help required

2011-05-02 Thread Colin Coe
Hi Amos On Tue, May 3, 2011 at 10:56 AM, Amos Jeffries squ...@treenet.co.nz wrote: On Tue, 3 May 2011 10:13:28 +0800, Colin Coe wrote: Is anyone using squirm successfully with squid v3.1.x?  I can't get anything to match Yes, several. Not me, I just know of people. Questions - Does the

Re: [squid-users] squid config help required

2011-05-02 Thread Amos Jeffries
On 03/05/11 15:15, Colin Coe wrote: Hi Amos On Tue, May 3, 2011 at 10:56 AM, Amos Jeffriessqu...@treenet.co.nz wrote: On Tue, 3 May 2011 10:13:28 +0800, Colin Coe wrote: Is anyone using squirm successfully with squid v3.1.x? I can't get anything to match Yes, several. Not me, I just know