Re: [squid-users] problem with 2 proxies in same network
this workaround compiling squid again without --enable-ntlm-fail didn't work for me. i still got authentication windows on the other proxy. i can't test it deeper, 'cause browsing through the internet will become unuseable. That was not the workaround whitch I suggested. I said that when using this flag, you may need the stable-12 patch I pointed you. M.
Re: [squid-users] problem with 2 proxies in same network
Hi Mark, hi list. Am Montag, den 16.01.2006, 22:59 +0100 schrieb Mark Elsen: You may need : http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE12-SMB_BadFetch M. this workaround compiling squid again without --enable-ntlm-fail didn't work for me. i still got authentication windows on the other proxy. i can't test it deeper, 'cause browsing through the internet will become unuseable. cheers andrew
Re: [squid-users] problem with 2 proxies in same network
Am Mittwoch, den 18.01.2006, 10:38 +0100 schrieb Mark Elsen: this workaround compiling squid again without --enable-ntlm-fail didn't work for me. i still got authentication windows on the other proxy. i can't test it deeper, 'cause browsing through the internet will become unuseable. That was not the workaround whitch I suggested. I said that when using this flag, you may need the stable-12 patch I pointed you. M. oh, ok. i thought, either I patch my running installation or I can recompile without this option, as the webpage describes. mhh, I'll give it one more try thanks, andrew
[squid-users] problem with 2 proxies in same network
hi list, i have two proxies on the same network/domain (one is a clone of another) their names are proxy1 and proxy2. I wanted to update one proxy from version 2.5-STABLE10 to STABLE 12. After this update the network authentication via ntlm_auth doesn't work anymore. so i tried to create a domain account for proxy2 again. But after this proxy1 stopped to authenticate! I was confused that my change had an influence to proxy1 ??? Please can anybody tell me what went wrong? 'cause after creating old proxy1 domain account again, this correlations went away. btw: what is the perfect setting for ntlm authentication for about 300 people? my config script: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp /etc/samba/smb.conf auth_param ntlm children 20 auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 20 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 10 minutes authenticate_ttl 2 minutes authenticate_ip_ttl 20 seconds proxy and domain controller are connected via gigabit. thanks in advance! cheers, andrew
Re: [squid-users] problem with 2 proxies in same network
hi list, i have two proxies on the same network/domain (one is a clone of another) their names are proxy1 and proxy2. I wanted to update one proxy from version 2.5-STABLE10 to STABLE 12. After this update the network authentication via ntlm_auth doesn't work anymore. In the STABLE12-case, what is the output of : % squid -v M.
AW: [squid-users] problem with 2 proxies in same network
Hi Mark, hi list. Squid -v on squids-STABLE12 should be a clone of squid-STABLE10. Just, that i recompiled it with the same properties as you can see now. Just after turning off this STABLE12-machine our network relieves harmless again But anyway - i want to stay on actual security-prevention. My output of 'squid -v': Squid Cache: Version 2.5.STABLE12 configure options: --with-dl --enable-snmp --enable-carp --enable-useragent-log '--enable-auth=basic digest ntlm' '--enable-basic-auth-helpers=LDAP MSNT NCSA PAM SMB YP getpwnam multi-domain-NTLM' '--enable-ntlm-auth-helpers=SMB no_check' --enable-digest-auth-helpers=password '--enable-external-acl-helpers=ip_user ldap_group unix_group wbinfo_group' --enable-ntlm-fail-open --enable-referer-log --enable-arp-acl --enable-htcp --enable-underscores --enable-stacktraces --enable-delay-pools --enable-ssl --enable-cache-digests --enable-poll --enable-x-accelerator-vary Cheers andrew -Ursprüngliche Nachricht- Von: Mark Elsen [mailto:[EMAIL PROTECTED] Gesendet: Montag, 16. Januar 2006 18:19 An: Mrvka Andreas Cc: squid-users@squid-cache.org Betreff: Re: [squid-users] problem with 2 proxies in same network hi list, i have two proxies on the same network/domain (one is a clone of another) their names are proxy1 and proxy2. I wanted to update one proxy from version 2.5-STABLE10 to STABLE 12. After this update the network authentication via ntlm_auth doesn't work anymore. In the STABLE12-case, what is the output of : % squid -v M.
Re: [squid-users] problem with 2 proxies in same network
Hi Mark, hi list. Squid -v on squids-STABLE12 should be a clone of squid-STABLE10. Just, that i recompiled it with the same properties as you can see now. Just after turning off this STABLE12-machine our network relieves harmless again But anyway - i want to stay on actual security-prevention. My output of 'squid -v': Squid Cache: Version 2.5.STABLE12 configure options: --with-dl --enable-snmp --enable-carp --enable-useragent-log '--enable-auth=basic digest ntlm' '--enable-basic-auth-helpers=LDAP MSNT NCSA PAM SMB YP getpwnam multi-domain-NTLM' '--enable-ntlm-auth-helpers=SMB no_check' --enable-digest-auth-helpers=password '--enable-external-acl-helpers=ip_user ldap_group unix_group wbinfo_group' --enable-ntlm-fail-open --enable-referer-log --enable-arp-acl --enable-htcp --enable-underscores --enable-stacktraces --enable-delay-pools --enable-ssl --enable-cache-digests --enable-poll --enable-x-accelerator-vary You may need : http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE12-SMB_BadFetch M.
AW: [squid-users] problem with 2 proxies in same network
-Ursprüngliche Nachricht- Von: Mark Elsen [mailto:[EMAIL PROTECTED] Gesendet: Montag, 16. Januar 2006 22:59 An: Mrvka Andreas Cc: Squid-Users Betreff: Re: [squid-users] problem with 2 proxies in same network You may need : http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE12-SMB_BadFetch M. So, you say after recompiling squid without '-enable-ntlm-fail-open' These 2 proxies can co-exist again? I will give it a try. Thanks for that. Cheers Andrew
