[squid-users] Clients cannot access HTTPS sites (ISA as parent Peer)

2010-03-08 Thread GIGO .
In our setup ISA is being used as parent peer. The problem is that clients cannot browse https Sites.(All http/ftp sites works fine) OS =Ubuntu 8.04 Squid3 is installed My Squid.conf File: visible_hostname 10.1.82.53 cache_peer ISASERVER parent 8080 0 default no-digest no-query http_port

RE: [squid-users] Clients cannot access HTTPS sites (ISA as parent Peer)

2010-03-08 Thread GIGO .
Peer) mån 2010-03-08 klockan 11:47 + skrev GIGO .: In our setup ISA is being used as parent peer. The problem is that clients cannot browse https Sites.(All http/ftp sites works fine) You need never_direct allow all Without that Squid will attempt to go direct when using a parent do

[squid-users] Combining Acls.

2010-03-10 Thread GIGO .
Hi all, My problem is that my acl for Pusr(power users) for denying access to facebook youtube in office hours is not working may be there is a conflict in the definition of time. Also please guide me that if i have done it alright or there are mistakes in the file and optimization overall

[squid-users] Images are not loading properly into web pages. (not sure about my cache settings)

2010-03-10 Thread GIGO .
Dear All, I am facing this problem that images are not loading properly into web pages. The clients that are directly on ISA are having better expereince of net browsig then Squid with cache. (Its response is slow). Something to do with my cache settings?? Further information : I have

RE: [squid-users] Images are not loading properly into web pages. (not sure about my cache settings)

2010-03-10 Thread GIGO .
: [squid-users] Images are not loading properly into web pages. (not sure about my cache settings) GIGO . wrote: Dear All, I am facing this problem that images are not loading properly into web pages. The clients that are directly on ISA are having better expereince of net browsig then Squid

RE: [squid-users] Images are not loading properly into web pages. (not sure about my cache settings)

2010-03-10 Thread GIGO .
: [squid-users] Images are not loading properly into web pages. (not sure about my cache settings) On Wed, 10 Mar 2010 14:50:50 +, GIGO . wrote: Dear Amos, Thank you very much for your detail analysis.I have tried to understood and implemented whatever u have told .However i have few more

[squid-users] Time Based ACL's

2010-03-11 Thread GIGO .
I have tried every trick but cannot made it to work please help out.Time based acls are not working. acl Whours time MTWHF 09:00-13:00 acl Whours time MTWHF 14:30-18:10 http_access deny PUsr youtube_domains Whours http_access deny PUsr Whours facebook_sites Instead of the access denied in

[squid-users] Dont use squid for local addresses how to.

2010-03-12 Thread GIGO .
I want a way that any requests for my local web servers located in (10.0.0.0/8) does not go to internet so proxy should bypass them otherwise to use my local web servers i have to do the settings in all the web browsers that dont use squid proxy for local web addresses. regards, Bilal

RE: [squid-users] Time Based ACL's

2010-03-12 Thread GIGO .
] Time Based ACL's you need to define ACL for PUsr as below and place it above all other ACLs as acl PUsr source On 3/11/2010 7:27 PM, GIGO . wrote: I have tried every trick but cannot made it to work please help out.Time based acls are not working. acl Whours time

[squid-users] Cache_dir size considerations

2010-03-15 Thread GIGO .
Dear All, Relevant info: On IBM Server 3650 x series with physical RAID 1 . Disk space comprises of 70 Gb Intended is caching of windows update. intended is caching of youtube contents. Single is dedicated to running squid on Ubuntu 8.04 Current Settings : cache_dir aufs

[squid-users] Squid Youtube caching Autostartup.

2010-03-16 Thread GIGO .
Please your guidance required on the following 1. I have studies these two guides for youtube content caching but i am not sure that whether this addresses squid3 as well or not. http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion?action

RE: [squid-users] Squid Youtube caching Autostartup.

2010-03-16 Thread GIGO .
Thank you. Date: Tue, 16 Mar 2010 21:38:10 + From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Squid Youtube caching Autostartup. On Tue, 16 Mar 2010 13:10:11 +, GIGO . gi...@msn.com wrote: Please your guidance required on the following

[squid-users] Max Object Size.

2010-03-16 Thread GIGO .
Dear All, Please guide me on this Is there any difference between maximum_object_size and max-size directives. What is the recommended setting when you are looking forward for caching windows update and youtube content. Almost 1000 clients. regards,

[squid-users] Startup/Shutdown scripts.

2010-03-16 Thread GIGO .
It is related to starting squid automatically at boot. i have tried enough but did not succeded in doing that. I have compiled squid3 stable24 on Ubuntu 8.04LTS. What i figured out is that squid is not being allowed to run as root so my startup scripts failed evend doing su -u proxy

FW: [squid-users] Cache_dir size considerations

2010-03-16 Thread GIGO .
Please somebody guide on the requested matter. From: gi...@msn.com To: squ...@treenet.co.nz; hen...@henriknordstrom.net; squid-users@squid-cache.org Date: Mon, 15 Mar 2010 13:03:24 + Subject: [squid-users] Cache_dir size considerations Dear

RE: [squid-users] Cache_dir size considerations

2010-03-17 Thread GIGO .
The total amount of Ram on the server is 4 GB with cache_mem parameter set to 1 GB. Date: Wed, 17 Mar 2010 08:18:03 +0100 From: mrom...@ottotecnica.com CC: squid-users@squid-cache.org Subject: Re: [squid-users] Cache_dir size considerations GIGO

RE: [squid-users] Startup/Shutdown scripts.

2010-03-17 Thread GIGO .
Still looking forward for some assistance on requested matter. Please guide regards, From: gi...@msn.com To: squid-users@squid-cache.org Date: Wed, 17 Mar 2010 04:59:29 + Subject: [squid-users] Startup/Shutdown scripts. It is related to

RE: [squid-users] Cache_dir size considerations

2010-03-17 Thread GIGO .
.. regards, Date: Wed, 17 Mar 2010 11:00:22 +0100 From: mrom...@ottotecnica.com CC: squid-users@squid-cache.org Subject: Re: [squid-users] Cache_dir size considerations GIGO . ha scritto: The total amount of Ram on the server is 4 GB

RE: [squid-users] Max Object Size.

2010-03-17 Thread GIGO .
great it feel right to me thanks! Date: Wed, 17 Mar 2010 02:46:04 -0700 From: jd...@yahoo.com To: squid-users@squid-cache.org Subject: Re: [squid-users] Max Object Size. From: GIGO . Is there any difference between maximum_object_size and max

RE: [squid-users] Squid cache_dir failed - can squid survive?

2010-03-18 Thread GIGO .
Dear henrik, If you have only one physical machine what is the best strategy for miminmizing the downtime and rebuild the cache directory again or start utilizing the squid without the cache directory? I assume we have to reinstall the Squid Software? Please guide

[squid-users] Cache_effective_user issue

2010-03-18 Thread GIGO .
I installed ubuntu server as u-admin account. I have set the directive: cache_effective_user to squidadmin. However my squid process keep on running as b-admin account. And my cache_effective user never comes into play. As per a guide which described that squid will only shift to the defined

[squid-users] Squid proxy Setup in fail-over mode

2010-03-18 Thread GIGO .
How to setup squid proxy to run in fail-over mode? Any guide. regards, Bilal Aslam _ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

RE: [squid-users] Squid cache_dir failed - can squid survive?

2010-03-18 Thread GIGO .
@squid-cache.org Date: Thu, 18 Mar 2010 09:54:34 +0100 Subject: RE: [squid-users] Squid cache_dir failed - can squid survive? tor 2010-03-18 klockan 06:16 + skrev GIGO .: Dear henrik, If you have only one physical machine what is the best strategy for miminmizing the downtime and rebuild

[squid-users] Absolute Beginner help required on concepts related to Cache_effective_user.

2010-03-19 Thread GIGO .
On a compiled squid3 stable24. I am unable to run squid as root in Ubuntu. So the cache_effective_user defined in squid.conf never comes into play. Is this a security concern? what good is cache_effective_user for? Is it right to run squid with the default ubuntu user one has installed

RE: [squid-users] Cache_dir size considerations

2010-03-19 Thread GIGO .
considerations GIGO . ha scritto: Well i want to make sure that my settings are optimized and want to learn more about the cache_dir settings.let me come in details Gigo, you are asking a lot of questions all at once. This is a volounteer-based support list, so your chances of getting

[squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory

2010-03-21 Thread GIGO .
Please guide me on this whats wrong. I am unable to compile Squid3stable24 on Ubuntu 8.04 LTS server. I want to use active directory authentication(my clients should be able to authenticate themselves with active directory accounts) Following is my command: ./configure

[squid-users] Peering squid multiple instances.

2010-03-23 Thread GIGO .
I have successfully setup running of multiple instances of squid for the sake of surviving a Cache directory failure. However I still have few confusions regarding peering multiple instances of squid. Please guide me in this respect. In my setup i percept that my second instance is doing

FW: [squid-users] Peering squid multiple instances.

2010-03-24 Thread GIGO .
: Re: [squid-users] Peering squid multiple instances. GIGO . wrote: I have successfully setup running of multiple instances of squid for the sake of surviving a Cache directory failure. However I still have few confusions regarding peering multiple instances of squid. Please guide me

[squid-users] Allowing ports used by Squid through Iptables.

2010-03-24 Thread GIGO .
I want to do the security hardening of my Squid Server with Iptables. I intend to have no rule on outbond traffic however ibound traffic would be restricted. please guide what are the minimum ports that are required to be open on iptables. Following is what i thought: Allow all incoming

[squid-users] Squid Compilation and Active Directory Authentication

2010-03-24 Thread GIGO .
purpose: To authenticate squid users through active directory before allowing them access to internet. Compile Options: ./configure --prefix=/usr --localstatedir=/var --libexecdir=${prefix}/lib/squid --srcdir=. --datadir=${prefix}/shares/squid --sysconfdir=/etc/squid3

[squid-users] After Running Multiple Instances my Squid speed/response is extremely slow.

2010-03-25 Thread GIGO .
DearAll, Please help me on this as after setting up multiple instances on the same server for (cache Directory fault tolerance myy squid speed/response is extremely slow and even most of the sites keep on opening and opening. I am failing to figure out whats wrong. Please guide me on this i

RE: [squid-users] After Running Multiple Instances my Squid speed/response is extremely slow.

2010-03-25 Thread GIGO .
Please I want to add information for my previous query. My previous setup with single instance was running fine.Another change is that i compiled my new setup with more options this time like enabling delay pools , cache digest and active directory authentication support. Is the below issue in

[squid-users] Extreme Slow Resposne from Squid ( Test environment only 4 users at the moment)

2010-03-25 Thread GIGO .
From the multiple instance setup using Squid 3stable25 i have shifted to squid3stable1 packaged with ubuntu 8.04 LTS.However i am unable to understand why its too much slow. Whats wrong please anybody help out.Is it something to do with Operating system? Or initially Squid runs that much slow?

[squid-users] Rebuilding storage in /var/spool/squid3 (DIRTY) ?

2010-03-26 Thread GIGO .
What is the meaning of Rebuilding storage in /var/spool/squid3 (DIRTY). regards, _ Your E-mail and More On-the-Go. Get Windows Live Hotmail Free.

RE: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory

2010-03-26 Thread GIGO .
Subject: Re: [squid-users] SquidCompilationproblem -squid_ldap_auth.c:123:18: error: lber.h: No such file or directory On Sun, 21 Mar 2010 19:37:56 +, GIGO . wrote: Please guide me on this whats wrong. I am unable to compile Squid3stable24 on Ubuntu 8.04 LTS server. I want to use

[squid-users] cache_peer

2010-03-28 Thread GIGO .
I want that if my first listed cache peer goes down then only should my second peer be used. - cache_peer 127.0.0.1 3128 0 default no-digest no-query no-delay (only if this is unavailable then the second one listed is used) cache_peer 10.1.82.205 8080 0 default proxy-only

[squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread GIGO .
I am using ISA server as cache_peer parent and runing multiple instances on my squid Sever. However i am failing to understand that why the behaviour of Squid is extremely slow. At home where i have direct access to internet the same setup works fine.Please somebody help me out regards,

RE: [squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread GIGO .
Very Slow responsetime. Experts please help. GIGO . wrote: I am using ISA server as cache_peer parent and runing multiple instances on my squid Sever. However i am failing to understand that why the behaviour of Squid is extremely slow. At home where i have direct access to internet

[squid-users] DNS Related Problem resolved your further guidance is required.

2010-03-31 Thread GIGO .
Date: Tue, 30 Mar 2010 17:05:50 +1300 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help. GIGO . wrote: I am using ISA server as cache_peer parent and runing multiple instances on my squid

[squid-users] Squid Reporting.

2010-03-31 Thread GIGO .
Is there a trick to trace cache_hits and Cache_misses in SARG and in more readable format.Also in detail and summarized form that how much data has been came through the cache.or i have to use someother tool and which? what is the best reporting tools to use for squid.Can someone give a

[squid-users] Upgrade to 3.1.1

2010-04-02 Thread GIGO .
Is it possible to upgrade from Squid3.0 to Squid3.1.1 by applying patch/diff. Is there any howto available which can be refered to? Should every body upgrade? _ Hotmail: Trusted email with

[squid-users] SSO with Active Directory-Squid Clients

2010-04-03 Thread GIGO .
Dear All/Amos, I want to allow certain(not all) Active Directory users to use squid by way of SSO with Active Directory. So means when any one from those specific users will login into Active Directory they should have automatically access to internet via Squid Proxy. Other AD users which

RE: [squid-users] Re: SSO with Active Directory-Squid Clients

2010-04-05 Thread GIGO .
with Active Directory-Squid Clients Have a look at http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos and http://sourceforge.net/projects/squidkerbauth/files/squidkerbldap/squid_kerb_ldap-1.2.1/squid_kerb_ldap-1.2.1.tar.gz/download Regards Markus GIGO . wrote in message news:snt134

[squid-users] Creating a kerberos Service Principal.

2010-04-06 Thread GIGO .
Dear All, Please guide me in regard to SSO setup with Active Directory(No winbind/Samba). I have the following questions in this regard. 1. Creating a Kerberos service principal and keytab file that is used by the Squid what is the effective method? Difference between using Ktpass vs

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-06 Thread GIGO .
think it will depend on your environment. Regards Markus GIGO . wrote in message news:snt134-w101cbed44254f957cda154b9...@phx.gbl... Dear Markus, Please i have few confusions which i want to satisfy. 1. If kerberos Authentication fails then what would be the fallback behavior would

[squid-users] Negotiate/NTLM Authentication a safer option then Negotiate/Kerberos??

2010-04-06 Thread GIGO .
Hi All, In our environment currently we are using ISA server with userbased authentication. we are using windows 2003 Active Directory and almost all of the users are using Windows based OS. We want to seemlessly migrate our users to Squid. I have not yet reached to any conlusion despite lot

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-07 Thread GIGO .
If i select negotiate/Kerberos as authentication protocol for my Squid on Linux and configure no FallBack Authentication.what would be the consequence ? 1. Isnt it that all of my users who have logged into Active Directory and where browser is supported will be able to use squid? 2.

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
this? Happy to discuss any of this off list or on. Cheers, Nick On 08/04/2010 04:06, GIGO . wrote: If i select negotiate/Kerberos as authentication protocol for my Squid on Linux and configure no FallBack Authentication.what would be the consequence ? 1. Isnt it that all of my users who

RE: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
regenerated. Have you experienced this? Happy to discuss any of this off list or on. Cheers, Nick On 08/04/2010 04:06, GIGO . wrote: If i select negotiate/Kerberos as authentication protocol for my Squid on Linux and configure no FallBack Authentication.what would be the consequence ? 1

RE: [squid-users] Re: Creating a kerberos Service Principal.

2010-04-08 Thread GIGO .
down-side to Kerberos is that it's an all-or-nothing service, either you use Kerberos and only Kerberos or you risk security breaches in any mixed situation. HTH Khaled 2010/4/6 GIGO . : Dear All, Please guide me in regard to SSO setup with Active Directory(No winbind/Samba). I have

[squid-users] ipcCreate error:

2010-04-10 Thread GIGO .
I have created a user proxy in Centos from which i am running my squid successfully with all the rights properly configured until i change my configuration file for Negotiate/Kerboros. I am receiving the following error when trying to start squid: 2010/04/09 05:06:12| helperOpenServers:

[squid-users] Authorization via LDAP group

2010-04-12 Thread GIGO .
Authorizing users via LDAP group: It is listed in the squid_ldap_group man page that using -D binddn -W secret fle is to be preferred on -D binddn -w password. While it provides extra security then printing the password in plaintext inside squid.conf. Doesnt this query itself go in clear

[squid-users] Upgradtion to Squid 3.1.1

2010-04-13 Thread GIGO .
When you upgrade is it possible to use the existing cache directories created through previous version(squid 3) or you have to rebuild your cache. regards, Bilal Aslam _ Hotmail: Trusted

RE: [squid-users] ipcCreate error:

2010-04-13 Thread GIGO .
: hen...@henriknordstrom.net To: gi...@msn.com CC: squid-users@squid-cache.org Date: Sat, 10 Apr 2010 19:44:31 +0200 Subject: Re: [squid-users] ipcCreate error: lör 2010-04-10 klockan 09:23 + skrev GIGO .: I have created a user proxy in Centos from which i am running my squid successfully

RE: [squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-15 Thread GIGO .
account of the UnixAdministrators to it. Finally I change the permissions on the OU=UnixPrincipals so that the members of the group UnixAdministrators have full rights (or limited rights ) for objects under this OU. Regards Markus GIGO . wrote in message news:snt134

RE: [squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-15 Thread GIGO .
/ spn upn and not just the domain. Also check your DNS and host local host entries. E.g.: msktutil -c -b CN=COMPUTERS -s HTTP/squid1.[mydomain] -k /etc/squid/HTTP.keytab --computer-name auth1 --upn HTTP/squid1 --server dc1 -verbose Nick On 15/04/2010 07:22, GIGO . wrote: Dear Markus

[squid-users] Unable to create keytab Msktutil ldap_set_option failed (local errror)

2010-04-15 Thread GIGO .
Dear All, Once again i failed to properly create keytab. Following is the detail of how i performed this task step No 1: i changed my krb5.conf file as follows; [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log

RE: [squid-users] ipcCreate error:

2010-04-15 Thread GIGO .
2010-04-14 klockan 04:47 + skrev GIGO .: Hi Henrik, Thank you this problem is resolved by placing the squid_kerb_auth in the libexec folder. Now i beleive that i also have to place any other helpers like squid_ldap_group in the same location to get it to work. Yes. if you have selinux

[squid-users] Kerberos Authentication in Relation to Connect ACLs

2010-04-16 Thread GIGO .
I get the following error whenever i try to use squid: (currently i am trying to use it from the AD which is also the KDC for squid to provide authentication.) Access Denied: Access control configuration prevents your request from being allowed at this time. Please contact your service

RE: [squid-users] Re: Re: Creating a kerberos Service Principal.

2010-04-16 Thread GIGO .
. Nick On 16/04/2010 08:43, GIGO . wrote: Dear Nick/Markus, I am totally lost in translation and am not sure what to do i need your help please. The problem is that my kerberos authentication is not working. In my virtual environment i have two machines one configured as Domain

RE: [squid-users] Re: Re: Re: Creating a kerberos Service Principal.

2010-04-16 Thread GIGO .
the browser is returning a NTLM token not a Kerberos token whu squid_kerb_auth will deny access. Regards Markus GIGO . gi...@msn.com wrote in message news:snt134-w155de8e05828b08d15c09ab9...@phx.gbl... Dear Nick, This was the result of my klist -k command: [r...@squidlhrtest log

[squid-users] SPN case sensitivity culprit for Negotiate/Kerberos Failures +msktutil

2010-04-21 Thread GIGO .
Dear Markus/Nick/All, After a great struggle and help (i got from you people)i was managed to resolve the issue however i have few confusions which i wish you to ask please. 1. First of all I traced down my problem to SPN Names casesensitivity the case for ServicePrincipalName attribute

[squid-users] Single Forest Multiple Domains kebreos setup (squid_kerb_ldap)

2010-04-22 Thread GIGO .
Dear Markus/All, Please guide me on the matter discussed below: Single Forest Multiple Domain setup A / \ / \ BC Problem: Single FOrest Multiple domains where as Root A is empty

[squid-users] squid_kerb_ldap/squid_kerb_auth in Single Forest Multidomains Active Directory.

2010-04-25 Thread GIGO .
Dear All, The problem under discussion is a continutity of SPN creation/Single Forest MultiDomain (Active Directory) topic. @ Markus Yes my infrastructure is Active Directory based (Root Forest Directory A with two child domains B (80 % users) C (20 % users) in their own trees). Only

[squid-users] Authentication Reverse Proxy

2010-05-02 Thread GIGO .
Hi, What is the behaviour/mechanism of authentication if using squid proxy for both as forward proxy and reverse proxy. I have successfully setup it for a forward proxy using the Helper files by Markus and the following tutorial;

[squid-users] Yum Updates and Squid

2010-05-04 Thread GIGO .
Dear All,   Is it safe enough to use Automatic yum updates on the squid Server machine? Is there any strict package version requirements to have those with which squid was already installed.     Automatic updates will even upgrade kernel as well so is it ok?        Please your guidance

[squid-users] Cache Contents.

2010-05-10 Thread GIGO .
Dear All, I want to confirm that my youtube/facebook and windowsupdate are being cached as i configured. How to have this assurity. Further i wish to view what are the contents of my cache. Please guide in this respect. Thanking you regards, Bilal

[squid-users] Squid in Deamon Mode

2010-05-10 Thread GIGO .
Hi, I start squid in the normal mode as following: /usr/sbin/squid -D -f /etc/squid/squid.conf Could there be any benefit achieved running it in a deamon mode. Can please somebody guide in detail Thanking in advance regards, Bilal

[squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-14 Thread GIGO .
Dear All, I require your help and guidance regarding dynamic content caching. Following are the quries. 1. I am running squid in multiple instances mode (For Cache Disk Failure Protection). I dont think that it has any effect on internet object caching? I am confused that if connect

RE: [squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-14 Thread GIGO .
All, I am really sorry i was looking at the access.log file of squid instance that is user facing and not the instance that is doing the fetching/caching and there i can see mp4 files being cached. However i am not very much confident about my settings so please read my queries and the

[squid-users] Access.log

2010-05-14 Thread GIGO .
Hi all, Can anybody please explain me what does this error mean and why it occurs it happens while i was testing youtube/facebook caching. TCP_NEGATIVE_HIT/204 Does this suggest that some object in cache has corrupted? if so how to rectify the error? Is this error only means that

[squid-users] never_direct/always_direct

2010-05-17 Thread GIGO .
Dear all, never_direct/always_direct Why two directives had to be created while one directive could have done the trick? Please guide regards, Bilal _ Hotmail: Free, trusted and rich

RE: [squid-users] Dynamic Content Caching/Windowsupdate/Facebook/youtube

2010-05-17 Thread GIGO .
Caching/Windowsupdate/Facebook/youtube GIGO . wrote: All, I am really sorry i was looking at the access.log file of squid instance that is user facing and not the instance that is doing the fetching/caching and there i can see mp4 files being cached. However i am not very much confident

[squid-users] SELINUX issue

2010-05-18 Thread GIGO .
Hi all, When i change SELINUX from permissive mode to Enforcing mode. My multiple instance setup fail to start. Please guide how to overcome this. ---Excerpts from cache.log- 2010/05/18 10:31:51| TCP connection to 127.0.0.1/3128 failed 2010/05/18

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-18 Thread GIGO .
Dear All, Your guidance is required. Please help. It looks that squid process run by default as a confined process whether its a compiled version or a version that come with the linux distro. It means that the squid software is SELINUX aware.Am i right? [r...@squidlhr ~]# ps -eZ | grep

[squid-users] Running Multiple instances and reporting confusion.

2010-05-18 Thread GIGO .
Hi all, I am running multiple instances of squid on the same machine. One instance is taking the clients request and forwarding to its parent peer at 127.0.0.1. All is going well. However there is a confusion related to reporting through sarg. To capture the client activity sarge is parsing

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-18 Thread GIGO .
| audit2allow You can also try to restore selinux context for all squid files: restorecon -R /etc/squid restorecon -R /var/log/squid etc... or touch /.autorelabel and reboot Tiery On Tue, May 18, 2010 at 9:47 AM, GIGO . wrote: Dear All, Your guidance is required. Please help. It looks

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-18 Thread GIGO .
context (with restorecon or .autorelabel and reboot). But i am not sure modifing this file is the best way. It you update your selinux policy, changement will not be persistent. I think it is better to build a selinux module for our squid. Tiery On Tue, May 18, 2010 at 2:34 PM, GIGO . wrote

RE: [squid-users] SELINUX issue

2010-05-18 Thread GIGO .
2010-05-18 klockan 06:02 + skrev GIGO .: 2010/05/18 10:31:52| storeLateRelease: released 0 objects 2010/05/18 10:31:52| TCP connection to 127.0.0.1/3128 failed setsebool -P squid_connect_any true should help there. Regards Henrik

[squid-users] Squid Compilation

2010-05-18 Thread GIGO .
Hi All, Your guidance is required regarding compilation. I had compiled squid-3.0.STABLE25 with the following options: ./configure --prefix=/usr --includedir=/usr/include --datadir=/usr/share --bindir=/usr/sbin --libexecdir=/usr/lib/squid --localstatedir=/var --sysconfdir=/etc/squid

RE: [squid-users] SELINUX issue(confinedunconfined)

2010-05-19 Thread GIGO .
increase the security of your proxy server. But you will need to build a policy module for squid_kerb_auth witch is not currently supported by selinux policy on redhat-like systems. What distrib do you use ? Tiery On Wed, May 19, 2010 at 6:17 AM, GIGO . wrote: Thank you i will give

[squid-users] Squid 3.1.3 squid 2.7 running together on the same server.

2010-05-19 Thread GIGO .
Hi All, I was running multiple instances of squid 3.0 Stable 25 on the same server successfully. However i intend to run squid 2.7 3.1.3 on the same server now reason being 2.7s enhance support of dynamic content caching. (Earlier the main intention to use multiple instances was to give

[squid-users] squid_kerb_auth Squid_kerb_ldap (Squid 2.7)

2010-05-20 Thread GIGO .
Hi all, Does squid_kerb_auth squid_kerb_ldap work fine in squid 2.7 like squid 3.x. Are these the correct options? ./configure *...*--enable-basic-auth-helpers=LDAP --enable-auth=basic,negotiate,ntlm --enable-external-acl-helpers=wbinfo_group,ldap_group

RE: [squid-users] squid_kerb_auth Squid_kerb_ldap (Squid 2.7)

2010-05-20 Thread GIGO .
:52 + skrev GIGO .: Does squid_kerb_auth squid_kerb_ldap work fine in squid 2.7 like squid 3.x. Yes. ./configure *...*--enable-basic-auth-helpers=LDAP --enable-auth=basic,negotiate,ntlm --enable-external-acl-helpers=wbinfo_group,ldap_group --enable-negotiate-auth-helpers

[squid-users] Memory Considerations when you are running multiple instances of squid on the same server.

2010-05-21 Thread GIGO .
Hi All, can it be said as a generalization that one can allocate/fix 1/4 of physical ram for cache mem objects. Will it holds true even when you are running multiple instances??? please guide that how memory handling will be occuring in multiple instances setup???cache_mem will

RE: [squid-users] Memory Considerations when you are running multiple instances of squid on the same server.

2010-05-21 Thread GIGO .
instances of squid on the same server. fre 2010-05-21 klockan 06:38 + skrev GIGO .: can it be said as a generalization that one can allocate/fix 1/4 of physical ram for cache mem objects. Will it holds true even when you are running multiple instances??? I would not generalize a rule

[squid-users] Runcache script- Lot of confusion

2010-05-22 Thread GIGO .
Hi all, Please guide about runcache script behaviour uptil now i have only understood this that this script will check and autorestart squid in case of failure. I also assume that this script should be registered with init.d for startup/shutdown. Where is this script located?(2.7 version).

[squid-users] Startup/shutdown script which was working perfactly alright for squid 3.0stable25 is not working for squid 2.7 stable9.0

2010-05-22 Thread GIGO .
Hi all, I am able to run squid manually however whenever i try to run it through the startup/shutdown script it fails. This is the same script working for squid 3.0 stable 25 however i am not being able to figure out that why its failing on squid 2.7 stable 9? Neither of the instance starts

[squid-users] Squid 2.7 working with reference to storeurl/caching?

2010-05-23 Thread GIGO .
Hi all, I request that please read my squid.conf file and guide me on the order of the directives and any issue as i am unable to cache a single thing. Does it matter the order of definition of the following? 1. storeurl program 2. refresh patterns 3 storeurl rewrite lists... I assume :

RE: [squid-users] Running Multiple instances and reporting confusion.

2010-05-27 Thread GIGO .
-cache.org Subject: Re: [squid-users] Running Multiple instances and reporting confusion. GIGO . wrote: Hi all, I am running multiple instances of squid on the same machine. One instance is taking the clients request and forwarding to its parent peer at 127.0.0.1. All is going well. However

[squid-users] Youtube -An error occured, please try again later

2010-05-27 Thread GIGO .
Hi all, For some of my youtube videos i am getting the following error. An error occured, please try again later. I have confirmed that this only occur when squid is being used. find below the relevant information in this regard. cache_dir aufs

FW: [squid-users] Youtube -An error occured, please try again later

2010-05-28 Thread GIGO .
My store.logs are following 1275025642.358 SWAPOUT 00 8152 04FD0DB17EE9789F06B1386F1D6CDA4D 200 1275025483 1234793502 1275047700 video/x-flv 5142132/5142132 GET

RE: [squid-users] Youtube -An error occured, please try again later

2010-05-28 Thread GIGO .
: On Fri, 28 May 2010 06:15:32 + GIGO . wrote: My store.logs are following A. Because people read from top to bottom. Q. Why should I not top post? Ah, fun... you know. sdrawkcab daer lla tnac ew so please dont posting above the reference what is top posting? and my

RE: [squid-users] Youtube -An error occured, please try again later

2010-05-28 Thread GIGO .
, Bilal Subject: Re: [squid-users] Youtube -An error occured, please try again later From: hen...@henriknordstrom.net To: gi...@msn.com CC: squid-users@squid-cache.org Date: Fri, 28 May 2010 18:53:19 +0200 fre 2010-05-28 klockan 05:33 + skrev GIGO

RE: [squid-users] Youtube -An error occured, please try again later

2010-05-31 Thread GIGO .
] Youtube -An error occured, please try again later GIGO . wrote: Hi henrik, Right now i don't have my access.log. (will share it with you after the weekend) However let me tell you that after setting the negative_ttl to 0. Apparently the problem was resolved. But i need to be sure about

[squid-users] Confusion regarding regex

2010-06-16 Thread GIGO .
Hi, Please need your guidance regarding the regex used by squid. Is it bre ere or perl? I assume that squid using a gnurep compatible version? Am i right? In grep to use some metacharacter we have to encode it which are ‘\?’, ‘\+’, ‘\{’, ‘\|’, ‘\(’, and ‘\)’ does this hold true to write

RE: [squid-users] Confusion regarding regex

2010-06-16 Thread GIGO .
23:11:08 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Confusion regarding regex GIGO . wrote: Hi, Please need your guidance regarding the regex used by squid. Is it bre ere or perl? I assume that squid using a gnurep compatible version? Am i

RE: [squid-users] Confusion regarding regex

2010-06-21 Thread GIGO .
Date: Wed, 16 Jun 2010 23:11:08 +1200 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] Confusion regarding regex GIGO . wrote: Hi, Please need your guidance regarding the regex used by squid. Is it bre ere or perl? I assume that squid

RE: [squid-users] Confusion regarding regex

2010-06-21 Thread GIGO .
+ skrev GIGO .: Hi Amos, There is still some confusion regarding regex and any help will be great please. you told that squid uses posix regex but is it BRE or ERE??? Extended. as for ERE according to my best understanding special characters are not required to be escaped

[squid-users] DNS server setup for squid/kerberos

2010-06-23 Thread GIGO .
Dear All, Your help is required. Problem: Setting up squid in an Active Directory environment. (where Active Directory domain controllers, Windows clients, UNIX clients, and application servers must all have a shared understanding of the correct host names and IP addresses for each

  1   2   >