[squid-users] ETAG injection

2012-01-05 Thread Simon Hurley
Hi, I'm trying to introduce the use of ETAG in an application.  My application includes ETAGs in responses to requests for resource x, but Squid isn't adding ETAGs in to the 'If-None-Match' header in subsequent requests to resource x.  I am using Squid 3.0.STABLE19? http_port 80 accel vhost

[squid-users] Re: Re: Re: Kerberos with LDAP authentication failover and iTunes auth problems

2012-01-05 Thread Markus Moeller
It could be because of the wrong use of msktutil. The -s option require HTP/fqdn. msktutil --help shows: -s, --service name Adds the service name for the current host. The service is of the form service/hostname. If the hostname is omitted,

[squid-users] Force A lookup first, then AAAA

2012-01-05 Thread John
Hello all, I'm regularly encountering a problem where remote websites have incorrectly configured their DNS servers to respond with SERVFAIL instead of NXDOMAIN to IPv6 queries. This can result in delays of up to 90 seconds as Squid cycles through the DNS servers making IPv6 , then

Re: [squid-users] Force A lookup first, then AAAA

2012-01-05 Thread John
Basically I'm looking for a third option to dns_v4_fallback, like this: If this is Squid will lookup A and only try if none found. John --- On Thu, 5/1/12, John just_bytes...@yahoo.co.uk wrote: From: John just_bytes...@yahoo.co.uk Subject: [squid-users] Force A lookup first, then

[squid-users] Re: Re: Re: Kerberos with LDAP authentication failover and iTunes auth problems

2012-01-05 Thread Markus Moeller
Looking at your email again. You say your hostname is 3msydproxy01.example.local including the domain. So it should have worked. I think the problem is that ou don't use the -s HTTP switch for the auto update as I see msktutils tries to authenticate as host/fqdn instead of HTTP/fqdn and get

Re: [squid-users] ETAG injection

2012-01-05 Thread Amos Jeffries
On 5/01/2012 11:22 p.m., Simon Hurley wrote: Hi, I'm trying to introduce the use of ETAG in an application. My application includes ETAGs in responses to requests for resource x, but Squid isn't adding ETAGs in to the 'If-None-Match' header in subsequent requests to resource x. I am using

[squid-users] tproxy specific issue on squid 3.1.18 using fedora 15

2012-01-05 Thread Eliezer Croitoru
i made a squid url_rewriter for cache purposes and it works on ubunut and on fedora 16(i686). also it works on fedora 15 with the 3.2.0.12 rpm from fedora 16 repo. the problem is that when the re_rewriter is replying with the address to squid the session that squid is creating is : from the

[squid-users] Re: Squid and Splash page

2012-01-05 Thread ming
Hi I wonder if someone can check my previous message to see the hack that I made in the external_acl_type.cc function is really a legitimate fix. Thanks Ming -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-and-Splash-page-tp3473302p4266323.html Sent

Re: [squid-users] Re: Re: Re: Kerberos with LDAP authentication failover and iTunes auth problems

2012-01-05 Thread James Robertson
Looking at your email again. You say your hostname is 3msydproxy01.example.local including the domain. So it should have worked. I think the problem is that ou don't use the -s HTTP switch for the auto update as I see msktutils tries to authenticate as host/fqdn instead of HTTP/fqdn and get

[squid-users] Unable to resolve internally w/ Squid

2012-01-05 Thread berry guru
I'm running Squid 2.7(stable) on Ubuntu 11.10. I'm having some trouble with internal DNS. For some reason I get the following error: ERROR The requested URL could not be retrieved. Unable to determine IP address from hose name server name goes here The DNS returned: Server Failure: The anem

[squid-users] Re: Re: Re: Re: Kerberos with LDAP authentication failover and iTunes auth problems

2012-01-05 Thread Markus Moeller
James Robertson j...@mesrobertson.com wrote in message news:CAMALoy9d=kwHQAAfP8=1suhwnW8eq7Q=jr3aataujs25nx8...@mail.gmail.com... Looking at your email again. You say your hostname is 3msydproxy01.example.local including the domain. So it should have worked. I think the problem is that ou

Re: [squid-users] Unable to resolve internally w/ Squid

2012-01-05 Thread Eliezer Croitoru
On 06/01/2012 01:48, berry guru wrote: I'm running Squid 2.7(stable) on Ubuntu 11.10. I'm having some trouble with internal DNS. For some reason I get the following error: ERROR The requested URL could not be retrieved. Unable to determine IP address from hose name server name goes here The

[squid-users] ssorry fix to the line Re: [squid-users] Unable to resolve internally w/ Squid

2012-01-05 Thread Eliezer Croitoru
On 06/01/2012 02:51, Eliezer Croitoru wrote: On 06/01/2012 01:48, berry guru wrote: I'm running Squid 2.7(stable) on Ubuntu 11.10. I'm having some trouble with internal DNS. For some reason I get the following error: ERROR The requested URL could not be retrieved. Unable to determine IP

[squid-users] got some debugging logs

2012-01-05 Thread Eliezer Croitoru
i put squid on debug section: 89 to follow tproxy and 17 to see what is going on inside other stuff and i found out this: section 89 fine not showing anything about using the client ip as 192.168.102.100 : 2012/01/06 04:23:54.072| IpIntercept.cc(381) NatLookup: address BEGIN: me=

RE: [squid-users] Re: Re: Re: Re: Kerberos with LDAP authentication failover and iTunes auth problems

2012-01-05 Thread James Robertson
This doesn't matter what does the next lines say ? -- try_machine_keytab_princ: Trying to authenticate for HTTP /3msydproxy01.example.local from local keytab... This should be successful. The kinit test before the update and a wireshark capture would help identify the issue (i.e. a

Re: [squid-users] got some debugging logs

2012-01-05 Thread Amos Jeffries
On 6/01/2012 3:37 p.m., Eliezer Croitoru wrote: i put squid on debug section: 89 to follow tproxy and 17 to see what is going on inside other stuff and i found out this: section 89 fine not showing anything about using the client ip as 192.168.102.100 : 2012/01/06 04:23:54.072|

Re: [squid-users] got some debugging logs

2012-01-05 Thread Eliezer Croitoru
section 17 show abnormail thing: (the outgoing address to the server is the client address and not one of the server address) 2012/01/06 04:28:36.782| store_client::copy: 7DEA6A0583B90AB461F576C6AEE4AA50, from 0, for length 4096, cb 1, cbdata 0x882b5b8 2012/01/06 04:28:36.783|