Re: [squid-users] LDAP Auth re-prompting for credentials on browser close, need suggestions

2015-07-30 Thread Michael Monette
On 7/29/2015 5:20 PM, Amos Jeffries wrote: Found this post asking the same question: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Ldap-Authen-AD-how-to-make-authentication-persistent-td3604487.html and it There were two suggestions that stood out: There used to be a

Re: [squid-users] error windbind

2015-07-30 Thread Posta Esterna
Thanx.. I don't understand a something... Where do i need to find Samba? On the Proxy or on the AD Server? I don't think i have to create a Samba server on the Proxy... is it true? So how can i tell Squid to connect to the right Samba Server? Il 24/07/2015 15.50, Amos Jeffries ha scritto:

Re: [squid-users] LDAP Auth re-prompting for credentials on browser close, need suggestions

2015-07-30 Thread Amos Jeffries
On 31/07/2015 3:36 a.m., Michael Monette wrote: On 7/29/2015 5:20 PM, Amos Jeffries wrote: Found this post asking the same question: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Ldap-Authen-AD-how-to-make-authentication-persistent-td3604487.html and it There were two

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Amos Jeffries
On 31/07/2015 3:48 a.m., Mike wrote: On 7/27/2015 17:25 PM, Amos Jeffries wrote: On 28/07/2015 8:38 a.m., Mike wrote: Running into an issue, using the squid.conf entry dns_nameservers 72.x.x.x 72.x.y.y These are different servers (under our control) for the purpose of filtering than listed

[squid-users] squid centos and osq_lock

2015-07-30 Thread Josip Makarevic
Hi, I have a problem with squid setup (squid version 3.5.6, built from source, centos 6.6) I've tried 2 options: 1. SMP 2. NON-SMP I've decided to stick with custom build non-smp version and the thing is: - i don't need cache - any kind of it - I have DNS cache just for that - squid has to

Re: [squid-users] error windbind

2015-07-30 Thread Amos Jeffries
On 31/07/2015 2:49 a.m., Posta Esterna wrote: Thanx.. I don't understand a something... Where do i need to find Samba? On the Proxy or on the AD Server? AD server is the server. Samba contains parts that are clients. Winbind, nmblookup, smbclient, and the ntlm_auth helper are the client

Re: [squid-users] squid centos and osq_lock

2015-07-30 Thread Amos Jeffries
On 31/07/2015 8:05 a.m., Josip Makarevic wrote: Hi, I have a problem with squid setup (squid version 3.5.6, built from source, centos 6.6) I've tried 2 options: 1. SMP 2. NON-SMP I've decided to stick with custom build non-smp version and the thing is: - i don't need cache - any kind

[squid-users] LDAP related question.

2015-07-30 Thread Eliezer Croitoru
I wanted to test the ext_ldap_group_acl so I created a ldap domain. The command I am testing is: /usr/lib/squid3/ext_ldap_group_acl -b DC=ngtech,DC=local -D CN=admin,DC=ngtech,DC=local -w password -f ((objectclass=person)(sAMAccountName=%v)(memberof=CN=%a,DC=ngtech,DC=local)) -h 127.0.0.1

[squid-users] forward proxy - many users with one login/passwd.

2015-07-30 Thread Berkes, David
Just a basic question. I have a 3.5.0.4 forward proxy setup with basic authentication for my MDM proxy (iphones). All iphones are set with the global proxy and identical user-name/password. They will be on an LTE network and will be switching IP's often. The forward proxy

Re: [squid-users] Squid 3.4.14

2015-07-30 Thread FredB
Well. Yes an 3.4 has a serious CVE that needs releasing. So it will be a thing this weekend. But no other bug fixes in the past few months qualify as security issues. So yes you need to be moving on to 3.5. Especially if you are using the ssl-bump features. Amos So, no chance for

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Mike
On 7/27/2015 17:25 PM, Amos Jeffries wrote: On 28/07/2015 8:38 a.m., Mike wrote: Running into an issue, using the squid.conf entry dns_nameservers 72.x.x.x 72.x.y.y These are different servers (under our control) for the purpose of filtering than listed in resolv.conf (which are out of our

Re: [squid-users] dns failover failing with 3.4.7

2015-07-30 Thread Mike
On 7/30/2015 16:30 PM, Amos Jeffries wrote: On 31/07/2015 3:48 a.m., Mike wrote: On 7/27/2015 17:25 PM, Amos Jeffries wrote: On 28/07/2015 8:38 a.m., Mike wrote: Running into an issue, using the squid.conf entry dns_nameservers 72.x.x.x 72.x.y.y These are different servers (under our

Re: [squid-users] Squid 3.4.14

2015-07-30 Thread Amos Jeffries
On 30/07/2015 8:08 p.m., FredB wrote: Well. Yes an 3.4 has a serious CVE that needs releasing. So it will be a thing this weekend. But no other bug fixes in the past few months qualify as security issues. So yes you need to be moving on to 3.5. Especially if you are using the ssl-bump