[squid-users] ipcCreate error:

2010-04-10 Thread GIGO .

 
I have created a user proxy in Centos from which i am running my squid 
successfully with all the rights properly configured until i change my 
configuration file for Negotiate/Kerboros.
 
 
I am receiving the following error when trying to start squid:
 
2010/04/09 05:06:12| helperOpenServers: Starting 10/10 'squid_kerb_auth' 
processes
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| Unlinkd pipe opened on FD 20

 
For trouble shooting I have just installed Strace and created a script as per 
Markus recommendations.
---
#/bin/sh

strace -f -F -o /tmp/strace.out.$$ squid_kerb_auth $*
--
 
Now i have no idea how to use scripts from within squid.conf. And at which 
place should i place this script in the squid.conf in relation to the following?
 
auth_param negotiate program /usr/sbin/squid_kerb_auth
 
 
 
regards,
 
Bilal Aslam
 
 
 
  
_
Hotmail: Trusted email with powerful SPAM protection.
https://signup.live.com/signup.aspx?id=60969

[squid-users] Re: ipcCreate error:

2010-04-10 Thread Markus Moeller

Hi Bilal,

  The error probably means that your squid user has no permission to 
read/execute squid_kerb_auth.  If you use a script you have to change


auth_param negotiate program /usr/sbin/squid_kerb_auth
to
auth_param negotiate program /usr/sbin/squid_kerb_auth_script.sh

assuming your script is /usr/sbin/squid_kerb_auth_script.sh

Regards
Markus


"GIGO ."  wrote in message 
news:snt134-w41ab41624dc6bb7ceef2a9b9...@phx.gbl...



I have created a user proxy in Centos from which i am running my squid 
successfully with all the rights properly configured until i change my 
configuration file for Negotiate/Kerboros.



I am receiving the following error when trying to start squid:

2010/04/09 05:06:12| helperOpenServers: Starting 10/10 'squid_kerb_auth' 
processes
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied

2010/04/09 05:06:12| Unlinkd pipe opened on FD 20


For trouble shooting I have just installed Strace and created a script as 
per Markus recommendations.

---
#/bin/sh

strace -f -F -o /tmp/strace.out.$$ squid_kerb_auth $*
--

Now i have no idea how to use scripts from within squid.conf. And at which 
place should i place this script in the squid.conf in relation to the 
following?


auth_param negotiate program /usr/sbin/squid_kerb_auth



regards,

Bilal Aslam




_
Hotmail: Trusted email with powerful SPAM protection.
https://signup.live.com/signup.aspx?id=60969 





Re: [squid-users] ipcCreate error:

2010-04-10 Thread Amos Jeffries

GIGO . wrote:
 
I have created a user proxy in Centos from which i am running my squid successfully with all the rights properly configured until i change my configuration file for Negotiate/Kerboros.
 
 
I am receiving the following error when trying to start squid:
 
2010/04/09 05:06:12| helperOpenServers: Starting 10/10 'squid_kerb_auth' processes

2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied
2010/04/09 05:06:12| ipcCreate: /usr/sbin/squid_kerb_auth: (13) Permission 
denied


The new helper binary needs a minimum of read and execute permission for 
the Squid user to run it. Any resources and files the helper requires 
also need permissions for the Squid user to access them.




 
For trouble shooting I have just installed Strace and created a script as per Markus recommendations.

---
#/bin/sh

strace -f -F -o /tmp/strace.out.$$ squid_kerb_auth $*
--
 
Now i have no idea how to use scripts from within squid.conf. And at which place should i place this script in the squid.conf in relation to the following?
 
auth_param negotiate program /usr/sbin/squid_kerb_auth
 


Assuming your script is at the path "/test/script" that would become:

  auth_param negotiate program /test/script /usr/sbin/squid_kerb_auth


Or you could just do this (one line, mind the wrap):

  auth_param negotiate program /usr/bin/strace -f -F -o /tmp/strace.out 
/usr/sbin/squid_kerb_auth


Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.1


[squid-users] ACL or file containing allowed MACs?

2010-04-10 Thread Dayo Adewunmi

Hi everyone

Is it possible to give a list of allowed MAC addresses in squid, i.e. 
via ACLs or a file

and then have it block unauthorized MACs?
Thanks

Dayo


Re: [squid-users] ACL or file containing allowed MACs?

2010-04-10 Thread Kinkie
On Sat, Apr 10, 2010 at 3:39 PM, Dayo Adewunmi  wrote:
> Hi everyone
>
> Is it possible to give a list of allowed MAC addresses in squid, i.e. via
> ACLs or a file
> and then have it block unauthorized MACs?

Yes. As long as all clients are on the same LAN as squid.


-- 
/kinkie


[squid-users] Squid 3 Reverse proxy "Invalid response Error"

2010-04-10 Thread Paul B Issak
Hi,

Recently I've got an error while commenting on a Wordpress post.

http://i43.tinypic.com/2guz98x.jpg

The squid 3 is configured as a reverse proxy

http_port xxx.xxx.xxx.xxx:80 vhost vport accel
cache_peer     127.0.0.1  parent 8080 0 originserver default

cache_dir ufs /var/spool/squid3 1000 16 256

Thank you.

Regards,
Paul


Re: [squid-users] ipcCreate error:

2010-04-10 Thread Henrik Nordström
lör 2010-04-10 klockan 09:23 + skrev GIGO .:
> 
> I have created a user proxy in Centos from which i am running my squid
> successfully with all the rights properly configured until i change my
> configuration file for Negotiate/Kerboros.

Do you have selinux enabled?

Try moving the helper to /usr/libexec/squid/ instead of /usr/sbin/...

>  
> Now i have no idea how to use scripts from within squid.conf. And at which 
> place should i place this script in the squid.conf in relation to the 
> following?

Instead of the normal program.
>  
> auth_param negotiate program /usr/sbin/squid_kerb_auth


Regards
Henrik



Re: [squid-users] Squid 3 Reverse proxy "Invalid response Error"

2010-04-10 Thread Henrik Nordström
lör 2010-04-10 klockan 23:08 +0530 skrev Paul B Issak:
> Hi,
> 
> Recently I've got an error while commenting on a Wordpress post.
> 
> http://i43.tinypic.com/2guz98x.jpg
> 
> The squid 3 is configured as a reverse proxy

Squid did not like the server response. Something malformed about it.

Anything in cache.log?

Regards
Henrik



[squid-users] Can't get my Squid proxy to use my c:\windows\system32\drivers\etc\hosts file.

2010-04-10 Thread Phillip Pi
Hello!

I just configured a new Squid proxy
(http://squid.acmeconsulting.it/download/squid-2.7.STABLE8-bin.zip) in
an updated Windows XP Pro. SP2 box for a testing proxy network setup for
a network program. I got its manual (no PAC scripts) proxy to work on
both client computer and server via Internet Explorer correctly. I am 
not using any PAC scripts either.

I couldn't get my prerelease network software to connect to the correct
test internal server. It ends up on the production one which I do not
want! According to
http://www.eu.squid-cache.org/mail-archive/squid-users/200903/index.html#226
thread's replies, Squid proxy does not read the Windows' hosts file by
default. Administrator has to tell Squid to do that in its Squid's
folder/directory's etc\squid.conf file (hosts_file section). I told 
Squid to use c:\windows\system32\drivers\etc\hosts with my custom hosts 
list.

However, I still could not get it to work in my activated 64-bit W7 
HP's IE8 client PC. I even tried public internet Web sites like:
157.166.255.19 msnbc.com
So client's IE8 should take me to CNN's Web site instead of 
www.msnbc.com, but it didn't (gave me MSNBC's Web site). I tried 
rebooting both PCs, restarting Squid service, etc.

What am I missing? Thank you in advance. :)
-- 
Quote of the Week: "You feel the faint grit of ants beneath your shoes,
but keep on walking because in this world you have to decide what you're
willing to kill."  --Tony Hoagland from "Candlelight"
  /\___/\  Phil./Ant @ http://antfarm.ma.cx (Personal Web Site)
 / /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net
| |o   o| | E-mail: phi...@earthlink.net/a...@zimage.com
   \ _ /  If crediting, then please kindly use Ant nickname
( )  and AQFL URL/link.


Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-10 Thread Mark Nottingham

On 09/04/2010, at 9:05 PM, Henrik Nordström wrote:

> We don't know how the server would react on Range requests to this
> ranged fs=.. object. Maybe it imlpements them, maybe it don't.


RED says it doesn't.

--
Mark Nottingham   m...@yahoo-inc.com