Re: Squid Issues and Problems

2008-07-07 Thread Jeremy Hall
ree to mean anyting implementation specific, as long as everyone involved privately agrees on what the meaning actually is... Regards Henrik On mån, 2008-07-07 at 11:01 -0400, Jeremy Hall wrote: > What do X-TE headers do? > > _J > > >>> <[EMAIL PROTECTED]> 7/7/

Re: Squid Issues and Problems

2008-07-07 Thread Jeremy Hall
What do X-TE headers do? _J >>> <[EMAIL PROTECTED]> 7/7/2008 5:28 AM >>> Hi there all, Firstly many thanks for all your work on Squid thus far :) I have been testing Squid 3.0 since PRE6 in various configurations, and one of the more notable issues I have found is that when Squid is running

Re: Proxy-Authenticate/Proxy-Authorization headers

2008-05-02 Thread Jeremy Hall
If you chain proxies, does it help? _J >>> Tsantilas Christos <[EMAIL PROTECTED]> 5/2/2008 12:51 PM >>> Hi all, According to the rfc standard the Proxy-Authenticate and Proxy-Authorization are hop-by-hop headers but in practice there are cases where these headers should forwarded. Currently sq

Re: squid3 comments

2007-02-28 Thread Jeremy Hall
Is squid3 faster or slower than squid2? _J >>> Alex Rousskov <[EMAIL PROTECTED]> 02/27/07 5:04 PM >>> On Tue, 2007-02-27 at 13:27 +0200, Tsantilas Christos wrote: > In the other hand I need a proxy with an icap client because I spent > time (and continue spending) to an icap related project. Squ

Re: squid3 comments

2007-02-27 Thread Jeremy Hall
>>> Adrian Chadd <[EMAIL PROTECTED]> 02/27/07 10:00 AM >>> On Tue, Feb 27, 2007, Jeremy Hall wrote: > I think we are on the same page for end-term goals, but what would you > recommend I do for today? Squid-3 is still a moving target. > So are you saying those

Re: squid3 comments

2007-02-27 Thread Jeremy Hall
>>> Adrian Chadd <[EMAIL PROTECTED]> 02/27/07 9:25 AM >>> On Tue, Feb 27, 2007, Jeremy Hall wrote: > Let me second this. When you start asking questions about squid3 and > its stability, you get anything from "it's stable" to "not for prime &g

Re: squid3 comments

2007-02-27 Thread Jeremy Hall
>>> Tsantilas Christos <[EMAIL PROTECTED]> 02/27/07 6:27 AM >>> Hi Adrian, Adrian Chadd wrote: agree . > Yes, I'd like to do all of what you've suggested above but I'm going to do it by > junking most of the client-side request/reply handling routines and replacing them > with stuff writ

icap in squid3

2007-02-09 Thread Jeremy Hall
Hello, I can't remember. What was the decided path for what was once the icap_auth_scheme? I recall there was some concern about my suggestion of having the ability to use ldap://hostname/cn=%u,dc=%d,dc=name,dc=int but I don't remember what the outcome was. _J

Re: Squid 3 HEAD - ICAP Modifications

2006-12-14 Thread Jeremy Hall
. Would it be possible to add this too ? I assume we talking about modifying the authenticated client username, passed via the icap_client_username_header to the ICAP server. I believe the right thing to do here is similar to what Jeremy Hall did with the icap_auth_scheme in http://www.squid-cache.org/

Re: TCP_DENIED logging as part of HTTP authentication

2006-12-13 Thread Jeremy Hall
oh I WHOLE_HEARTEDLY agree! the logs are filled with duplicate requests because of this _J >>> Adrian Chadd <[EMAIL PROTECTED]> 12/12/06 11:22 PM >>> Hiya, I've had a few customers ask me why there's "TCP_DENIED"s in the logfiles and I've tried to explain that its part of the NT authentication p

authentication and origin servers

2006-11-24 Thread Jeremy Hall
Hello, If I have configured authentication for both ntlm and basic so that legacy browsers that do not support ntlm may use my proxy, how then do I allow these users to connect to a site that uses basic authentication for their own purposes? For example I can't log into cisco.com unless I disable

Re: 2.6stable5 icap client - reqmod problems with webwasher 5.x and 6

2006-11-22 Thread Jeremy Hall
yep sure does. _J >>> Alex Rousskov <[EMAIL PROTECTED]> 11/22/06 9:26 AM >>> On Tue, 2006-11-21 at 19:25 -0500, Jeremy Hall wrote: > If I knew what the X-Authenticated-Groups header was supposed to > look like, I would come up with something. Does Section 3.5 &

icap problems with auth

2006-11-15 Thread Jeremy Hall
Hello, In the squid-2.6 patch for icap, one can provide the following: icap_send_server_ip icap_check_interval icap_auth_scheme The most interesting for auth here is icap_auth_scheme, which has a variety of options. What I would like is: if user was authenticated with ntlm_auth, I'd like to us

always_direct broken in squid3

2006-11-15 Thread Jeremy Hall
Hello, It seems as if the always_direct directive is broken in squid3. I have always_direct allow local-nets and local-nets acl local-nets allow dst 10.n.n.0/24 and if I try to hit 10.n.n.3, instead it tries to send to roundrobin_parent instead of direct. There are round-robin acls for the pe

icap in either squid-3 and squid-2

2006-11-07 Thread Jeremy Hall
Hello, I'm trying to track down why the Content-Length header might not be sent to the icap server in squid-2's implementation of icap. I'm not running squid-3 because people tell me squid-3 isn't ready for prime time and production use, but they also tell me the icap implementation in squid-3 is

Re: squid-3 pre

2006-11-03 Thread Jeremy Hall
Hi, I'm currently running 2.6-branch and am considering upgrading to 3, but I need to know how mature the code is. I would be updating for icap--I know an icap patch exists for 2.6 and I have it working with two anomolies: 1: the entire file is pulled before the content filter responds to the us

Re: [squid-users] 2.6S1 WCCP2 problems

2006-07-17 Thread Jeremy Hall
The 6509 code around that release was a bit strange. I couldn't find any newer code either, so the problem might be on the cisco side. THe debug commands suggested shouldn't be too bad as the GRE-encapsulated packets don't seem to show up i the debug, but I'd start at off-peek hours just to be sa

Re: WCCP2 compile problem

2006-05-16 Thread Jeremy Hall
Hi, I noticed that those zeroized lists would sometimes have a router id of 0.0.0.0 and then either wccp would try to send to 0.0.0.0:2048, it would abort wccp2 processing when it encountered it, or it would throw an error. Did you try it after zeroizing the list? _J >>> Henrik Nordstrom <[EMAI

Re: WCCPv2 support

2006-03-16 Thread Jeremy Hall
? _J >>> Henrik Nordstrom <[EMAIL PROTECTED]> 03/15/06 5:49 AM >>> ons 2006-03-15 klockan 00:23 -0500 skrev Jeremy Hall: > To build, apply the patch this came from, basically the "unfinished" > work from the original author of wccpv2 support in suqid. Edit the >

Re: WCCPv2 support

2006-03-14 Thread Jeremy Hall
>>> Reuben Farrelly <[EMAIL PROTECTED]> 03/14/06 9:08 PM >>> To build, apply the patch this came from, basically the "unfinished" work from the original author of wccpv2 support in suqid. Edit the src/Makefile and put in wccpv2.whatever next to every place you see wccp.whatever. Edit include/auto

Re: WCCPv2 support

2006-03-13 Thread Jeremy Hall
h. sorry about top-posting the mail software sucks :( _J >>> Henrik Nordstrom <[EMAIL PROTECTED]> 03/13/06 5:41 AM >>> sön 2006-03-12 klockan 23:04 -0500 skrev Jeremy Hall: > I'm not sure whether it is a good idea to wait until routers are > included (until we&

Re: WCCPv2 support

2006-03-12 Thread Jeremy Hall
way see you _J >>> Henrik Nordstrom <[EMAIL PROTECTED]> 03/11/06 11:50 AM >>> fre 2006-03-10 klockan 11:33 -0500 skrev Jeremy Hall: > Hello, > > I think I have implemented the cbdata stuff properly. > > This has the following problems: > > 1: doe

Re: WCCPv2 support

2006-03-11 Thread Jeremy Hall
good luck. _J >>> Henrik Nordstrom <[EMAIL PROTECTED]> 03/09/06 8:39 PM >>> tor 2006-03-09 klockan 15:13 -0500 skrev Jeremy Hall: > I am using xmalloc and xfree for allocation and deallocation of my list > structures, and xmemcpy to copy memory, but I am having real pro

WCCPv2 support

2006-03-09 Thread Jeremy Hall
Hello, I have been working on the wccpv2 patch to support multiple services and multiple routers. I am working rather well--I am able to form an adjacency (mostly) with a router but have some memory allocation issues. I am using xmalloc and xfree for allocation and deallocation of my list struct