Re: [squid-users] Kerberos auth not working

2014-10-03 Thread Markus Moeller
Can you capture the traffic on port 88 from the PC to AD after a clean boot and when you access squid ? Markus "masterx81" wrote in message news:1412360733691-4667648.p...@n4.nabble.com... All solved! Seem that kerberos is ALWAYS not working only on a specific worstation. If i use kerberos

Re: [squid-users] How to tell when Squid has finished setting up disk cache directories?

2014-10-03 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 4/10/2014 1:47 a.m., Stephen Baynes wrote: > At times we automatically start Squid from a clean setup. We run > squid -z to create the cache directories and then start Squid for > normal operation. The question is how to know when squid -z has > fin

Re: [squid-users] Kerberos auth not working

2014-10-03 Thread masterx81
All solved! Seem that kerberos is ALWAYS not working only on a specific worstation. If i use kerberos from any other pc it works as excepted. What can cause the error on that specific workstation? I've reinstalled the os due to this problem, and it's still there (os preinstalled, so i've used the r

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Victor Sudakov
Rafael Akchurin wrote: > > Tell me please, after implementing your guide, do you enjoy Kerberos > > proxy authentication in Firefox, or does it fall back to Basic auth? > I believe I do (but you made me doubt:) Can you please doublecheck which method your Firefox is using? All the howtos I have

[squid-users] Kerberos auth not working

2014-10-03 Thread masterx81
Hi to all! I've a 'little' problem I've followed the instruction of this guide: http://wiki.squid-cache.org/ConfigExamples/Authenticate/WindowsActiveDirectory And i've setup successfully the ntlm and basic authentication. browser and application works well, most of them use ntlm... But now i've

Re: [squid-users] squid 3.4. uses 100% cpu with ntlm_auth

2014-10-03 Thread masterx81
I can confirm that on 3.3.13 all is working correctly, the cpu usage is really low. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-3-4-uses-100-cpu-with-ntlm-auth-tp4664169p4667645.html Sent from the Squid - Users mailing list archive at Nabble.com. __

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Rafael Akchurin
I believe I do (but you made me doubt:) Can you please check if your browser is set to use FQDN of proxy not proxy's IP address. Raf From: Victor Sudakov Sent: Friday, October 3, 2014 4:46 PM To: Rafael Akchurin Cc: Amos Jeffries; squid-users@lists.squid

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Victor Sudakov
Rafael Akchurin wrote: > > Does Kerberos proxy authentication work with Firefox (Windows) at all? > > Success stories and recipes, anyone? > > If you see 'received type 1 NTLM token' message it means your IE was > not able to use the Kerberos auth and have chosen NTLM instead. Any ideas how I can

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Rafael Akchurin
Hello Victor, If you see 'received type 1 NTLM token' message it means your IE was not able to use the Kerberos auth and have chosen NTLM instead. Please ensure you are browsing from *domain joined* machine and using NTLM/Kerberos authentication wrapper as described in http://wiki.squid-cache.

[squid-users] How to tell when Squid has finished setting up disk cache directories?

2014-10-03 Thread Stephen Baynes
At times we automatically start Squid from a clean setup. We run squid -z to create the cache directories and then start Squid for normal operation. The question is how to know when squid -z has finished and it is safe to start Squid for normal operation. This is not a problem when one has one squ

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Victor Sudakov
Amos Jeffries wrote: > There are two things you can do to further improve performance: > 1) converting from NTLM to Kerberos authentication. Does Kerberos proxy authentication work with Firefox (Windows) at all? Success stories and recipes, anyone? NTLM did work both with Firefox and MSIE and e

Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.

2014-10-03 Thread Victor Sudakov
Amos Jeffries wrote: [dd] > > Bingo! After setting "ident_access deny all" squid does not grow > > infinitely any more. However, it remains a major CPU hog. > > > > Yay. Any news on the bug patch? Will try during the weekend. I can live without IDENT lookups for a while, they are not very imp