Re: [squid-users] Squid stops handling requests after 30-35 requests

2013-11-20 Thread Bhagwat Yadav
Hi Eliezer/All, Thanks for your help. PFA log snippets. Log1.txt is having sample 1 of cache.log in which you can find the time gap. Log2.txt is having sample 2 of client output and cache.log showing the time gap. It seems that there is some in memory operation "StatHistCopy" which is causing th

Re: [squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Amos Jeffries
On 21/11/2013 5:00 p.m., Brig wrote: > > Upgraded to ubuntu 14.04 and tried the bundled basic_ldap_auth binary, same > errors. Then recompiled Squid 3.3.10 tried that basic_ldap_auth binary, same > errors . . . > > I guess I just am not meant to use Squid with AD . . . :-( > Did you try the de

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Andrey
Did you tried default squid? apt-get install squid3 Maybe something else uses ldap port? Try with (if I am not wrong): debug_options 82,0 84,9 Do you have wireshark? Can you capture ldap requests on windows server from Ubuntu? Do you have firewall from Windows Server on? >From my practice it i

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Brig
Upgraded to ubuntu 14.04 and tried the bundled basic_ldap_auth binary, same errors. Then recompiled Squid 3.3.10 tried that basic_ldap_auth binary, same errors . . . I guess I just am not meant to use Squid with AD . . . :-( -- View this message in context: http://squid-web-proxy-cache.10190

[squid-users] Directives ignore-private and override-expire not working Squid 3.2 and 3.3

2013-11-20 Thread Lê Trung Kiên
Hello everyone, I’m using these configurations which work fine with squid 3.1 every items gets HIT. However these configurations don’t work properly with Squid 3.2 and 3.3, because I always get MISS with all items http_port 127.0.0.1:82 accel ignore-cc cache_peer 192.168.2.43 parent 80 0 no-quer

Re: [squid-users] Replay Auth

2013-11-20 Thread Amos Jeffries
On 21/11/2013 6:28 a.m., FredB wrote: > >> Objet: [squid-users] Replay Auth >> >> Hello, >> >> I'm trying to use squid with two identifications mode, first digest >> and second basic, all works without problem except one point >> >> auth_param basic credentialsttl 1 hours >> >> The proxy never cla

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Brig
Thx for the feedback & ideas! I realize 11.04 is old and in fact I was going to EoL this server since it is old yet then I figured I would keep it around to use as a Squid Proxy Test box. I did not think that being on 11.04 could be the problem all together! I have other U 12.04.2 servers yet s

Re: [squid-users] newbie: squid does not block https sites on blacklist

2013-11-20 Thread Amos Jeffries
On 2013-11-21 12:07, info wrote: I'm running centos6 server 64 bit with squid 3.3 as a transparent proxy server and I'm using a blacklist. Your problem starts with the word "transparent". * CONNECT is a client->proxy request method. It is not supposed to ever be sent over port 443. * traffi

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Andrey
Ok hmm... One more thing, did you follow this one: http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ldap#Windows_2003_Active_Directory_adjustments Because I use now the U13.10 version with Ubuntu's Squid 3.3.8 from repository, and Windows 2008 R2 AD. It is working good. However, as far as

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Brig
Yes I compiled Squid myself on Ubuntu. Our SA is pretty good so I would expect he has installed all the updates on the M$ machine. Not sure why you need netstat cuz as far as I can tell based on the results of test #3 and #4 above with ldapsearch it appears that AD is working and I can get info

[squid-users] newbie: squid does not block https sites on blacklist

2013-11-20 Thread info
I'm running centos6 server 64 bit with squid 3.3 as a transparent proxy server and I'm using a blacklist. I installed squid from the tarball with '--enable ssl' and the program starts fine. The blacklist is working for http sites but not for https sites. The relevant lines I have in squid.conf a

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Andrey
Ok so you have Windows Server 2003 R2. Do you have all updates installed on windows server? what shows netstat -aon in cmd? is there port 389 open? 3.3.10 should work... Did you build it by yourself? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Cannot-get

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Brig
Hi Andrey, Ubuntu 11.04 Squid 3.3.10 (compiled natively on Ubuntu 11.04) AD Version: 5.2.3790.3959 (would not surprise me if this AD version is out of date) No SSL I am not really an M$ guy so I do not know a whole lot about the AD side of it except that I am finding it extremely difficult to in

Re: [squid-users] unusual TCP_DENIED situation

2013-11-20 Thread Amos Jeffries
On 2013-11-21 04:39, Mark Redding wrote: Hello all, I run the network for a UK boarding school (1000 pupils and around 400 staff) and use a combination of squid and dansguardian to provide time controlled and filtered web access for all users. From time to time a number of users have reported re

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Andrey
Hi Which version of squid do you use? Which os do you use for squid? Which version of AD do you use? Is it a ssl ldap? Thanks. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Cannot-get-basic-ldap-auth-to-work-with-AD-tp4663282p4663404.html Sent from the S

Re: [squid-users] Re: Issue with Squid_ldap_group (Windows) ?

2013-11-20 Thread Amos Jeffries
On 2013-11-21 04:08, Raf wrote: After some problem with firewall configuration and some test with basic_ldap_auth inserting the line below in squid.conf associated with ACL ldap-auth can gain internet access only to active directory user. auth_param basic program /usr/lib64/squid/basic_ldap_a

Re: [squid-users] Replay Auth

2013-11-20 Thread Amos Jeffries
On 2013-11-21 03:23, FredB wrote: Hello, I'm trying to use squid with two identifications mode, first digest and second basic, all works without problem except one point auth_param basic credentialsttl 1 hours The proxy never claim the username and pass after 1 hour, so I found no way for forc

[squid-users] install with ssl

2013-11-20 Thread info
I'm running centos 6 server 64 bit. If I (yum) install squid 3.3 using the binary package from: http://www1.ngtech.co.il/rpm/centos/6/$basearch does this come with ssl enabled? or do I only get ssl if I install from the source tarball?

Re: [squid-users] Replay Auth

2013-11-20 Thread FredB
> Objet: [squid-users] Replay Auth > > Hello, > > I'm trying to use squid with two identifications mode, first digest > and second basic, all works without problem except one point > > auth_param basic credentialsttl 1 hours > > The proxy never claim the username and pass after 1 hour, so I fo

[squid-users] Re: Cannot get basic_ldap_auth to work with AD

2013-11-20 Thread Brig
Hi Peter, Thx for the replies! Your names sounds familiar, were you on the Squid project like 18 yrs ago? My first Squid project was back then when I used it to develop a load balancer and I wonder if we corresponded back then? Anyway here is the results of the four commands you asked me to issue

Re: [squid-users] squid 3.4.0.2 + smp + rock storage error

2013-11-20 Thread Alex Rousskov
On 11/20/2013 02:19 AM, Alexandre Chappaz wrote: > I have the same kind of error but what bugs me is that I cannot > reproduce this systematically. I am really wondering if this is a > permission PB on shm mount point and / or /var/run/squid permissions > : > > some times the service starts norm

[squid-users] Re: Issue with Squid_ldap_group (Windows) ?

2013-11-20 Thread Raf
Someone can help me ? The external helpers ext_ldap_group_acl is automatically present when i install squid on fedora 18 (x64) ? after fresh installation of Fedora 18 (with gnome) i installed squid from root (yum install squid) : i find the helpesr basic_ldap_auth but i don't see ext_ldap_group_

[squid-users] unusual TCP_DENIED situation

2013-11-20 Thread Mark Redding
Hello all, I run the network for a UK boarding school (1000 pupils and around 400 staff) and use a combination of squid and dansguardian to provide time controlled and filtered web access for all users. From time to time a number of users have reported receiving squid access denied messages - thou

[squid-users] Re: Issue with Squid_ldap_group (Windows) ?

2013-11-20 Thread Raf
Ok. I found that in squid 3.x the ldap helper is change from previous release ; instead of squid_ldap_group there’s the helper basic_ldap_auth (located in /usr/lib64/squid on Fedora 18 x64). ( http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html#ss4.2 ) After some problem with firewall

[squid-users] Replay Auth

2013-11-20 Thread FredB
Hello, I'm trying to use squid with two identifications mode, first digest and second basic, all works without problem except one point auth_param basic credentialsttl 1 hours The proxy never claim the username and pass after 1 hour, so I found no way for forcing the replay with digest squid s

Re: [squid-users] Cyberoam logging

2013-11-20 Thread Amos Jeffries
On 21/11/2013 1:19 a.m., alamb200 wrote: > Hi, > I have just managed to get Squid working as a proxy server on my Windows > server and want to start looking at the information in the log files. > To do this I have downloaded Cyberoam onto the same server running Squid and > need to try and getting

Re: [squid-users] Squid stops handling requests after 30-35 requests

2013-11-20 Thread Eliezer Croitoru
Hey, Can you try another test? It is very nice to use wget but there are couple options that needs to be consider. Just to help you if was not there until now add: --delete-after to the wget command line. It's not related to squid but it helps a lot. Now If you are up to it I will be happy to

Re: [squid-users] squid 3.4.0.2 + smp + rock storage error

2013-11-20 Thread Alexandre Chappaz
here it is 2013/11/20 Eliezer Croitoru : > Hey Alexandre, > > I do not see any cache.log attachment here. > Please resend it. > > Thanks, > Eliezer > > > On 20/11/13 11:19, Alexandre Chappaz wrote: >> >> Hi, >> >> I have the same kind of error but what bugs me is that I cannot >> reproduce this sy

[squid-users] Re: Basic config file

2013-11-20 Thread alamb200
I went back to the basic config file and started again an dthis is now working. Thanks for your help. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Basic-config-file-tp4663325p4663389.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] Cyberoam logging

2013-11-20 Thread alamb200
Hi, I have just managed to get Squid working as a proxy server on my Windows server and want to start looking at the information in the log files. To do this I have downloaded Cyberoam onto the same server running Squid and need to try and getting them working together but I cannot work out how to

Re: [squid-users] squid 3.4.0.2 + smp + rock storage error

2013-11-20 Thread Eliezer Croitoru
Hey Alexandre, I do not see any cache.log attachment here. Please resend it. Thanks, Eliezer On 20/11/13 11:19, Alexandre Chappaz wrote: Hi, I have the same kind of error but what bugs me is that I cannot reproduce this systematically. I am really wondering if this is a permission PB on shm m

Re: [squid-users] Squid stops handling requests after 30-35 requests

2013-11-20 Thread Bhagwat Yadav
Hi, I enable the logging but didn't find any conclusive or decisive logs so that I can forward you. In my testing, I am accessing same URL 500 times in a loop from the client using wget. Squid got hanged sometimes after 120 requests ,sometimes after 150 requests as: rm: cannot remove `index.html

[squid-users] Re: SSL-bump certificate issue?

2013-11-20 Thread Víctor Fernández Martínez
Hi Eliezer, I think it's a SSL Bump issue. I've also had the same problem: youtube.com, gmail.com and other Google sites caused Firefox to display a sec_error_inadequate_key_usage error when ssl-bumped. In my case, I managed to fix the issue with the attached patch for Squid 3.3.9. It prevents

[squid-users] Re: squid-2.7

2013-11-20 Thread Amos Jeffries
On 20/11/2013 6:55 p.m., z fazli wrote: > hi > > I want to compare performance of squid3 vs squid-2.7 in tproxy mod ,and > choose the best, but cannot install squid-2.7 on ubuntu 64 bit (on 32 bit > there is no problem). Is it possible to install 2.7 on ubuntu ? how? > The two are not comparible

RE: [squid-users] Fwd: Squid compiled size

2013-11-20 Thread Jenny Lee
> On 11/20/2013 12:04 AM, Mohd Akhbar wrote: > >> I compiled squid on Centos 6.2 64bit with >> >> ./configure --prefix=/usr --includedir=/usr/include >> --datadir=/usr/share --bindir=/usr/sbin --libexecdir=/usr/lib/squid >> --localstatedir=/var --sysconfdir=/etc/squid >> >> My compiled size for

Re: [squid-users] squid 3.4.0.2 + smp + rock storage error

2013-11-20 Thread Alexandre Chappaz
Hi, I have the same kind of error but what bugs me is that I cannot reproduce this systematically. I am really wondering if this is a permission PB on shm mount point and / or /var/run/squid permissions : some times the service starts normally ( worker kids stay up ) and some times some or all o

RE: [squid-users] intercepting SSL connections with client certificate

2013-11-20 Thread Shinoj Gangadharan
> -Original Message- > From: Amos Jeffries [mailto:squ...@treenet.co.nz] > Sent: Wednesday, November 20, 2013 1:59 PM > To: squid-users@squid-cache.org > Subject: Re: [squid-users] intercepting SSL connections with client certificate > > On 20/11/2013 8:02 p.m., Shinoj Gangadharan wrote: >

Re: [squid-users] intercepting SSL connections with client certificate

2013-11-20 Thread Amos Jeffries
On 20/11/2013 8:02 p.m., Shinoj Gangadharan wrote: >>> 1. sslbump is not passing on the client cert - I think this will be >>> fixed with SSLPeekandSplice feature >>> (http://wiki.squid-cache.org/Features/SslPeekAndSplice) >> >> I do not think this can be "fixed". IIRC, Squid cannot forward the > c

Re: [squid-users] Squid stops handling requests after 30-35 requests

2013-11-20 Thread Amos Jeffries
On 20/11/2013 7:59 p.m., Bhagwat Yadav wrote: > Hi, > > While doing some testing I am facing the issue that squid after some > time not able to the process the request and saying : > > Connecting to www.attblueroom.com|216.77.188.73|:80... failed: > Connection refused. > > Please provide some he