Re: [squid-users] clarifying Features/SslPeekAndSplice on wiki + fake CONNECT

2016-08-23 Thread Stanford Prescott
I've been thinking that since we are talking about the squid wiki perhaps we could just refer to it as the squiki? On Tue, Aug 23, 2016 at 10:11 AM, Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 08/23/2016 08:34 AM, Marcus Kool wrote: > > On 08/23/2016 11:26 AM, Alex Rousskov

[squid-users] Kerberos SSO Error: krb5_get_init_creds_keytab failed

2016-08-23 Thread erdosain9
Hi. Im trying to configure SSO (single sing on) with Kerberos. I have this error [root@squid squid]# kinit administrator Password for administra...@xxx.lan: Warning: Your password will expire in 28 days on mié 21 sep 2016 12:20:39 ART [root@squid squid]# msktutil -c -b "CN=COMPUTERS" -s

Re: [squid-users] dynamic group using URI as group name on external acl with ext_ldap_group_acl

2016-08-23 Thread Diogenes S. Jesus
> >> If you want to do things like this safely please upgrade to Squid-4 > >> where the logformat codes are available. Those codes provide > >> customizable escaping and quoting styles so you can set one that > >> protects LDAP against these attacks to be ued on the URI field value > >> sent by

Re: [squid-users] DENIED and ALLOWED at once?

2016-08-23 Thread Sergio Belkin
2016-08-19 17:22 GMT-03:00 Antony Stone : > On Friday 19 August 2016 at 20:41:11, Jok Thuau wrote: > > > On Fri, Aug 19, 2016 at 9:33 AM, Sergio Belkin wrote: > > > /var/log/squid/access.log > > > 192.168.50.41 - - [19/Aug/2016:12:19:45 -0300]

Re: [squid-users] clarifying Features/SslPeekAndSplice on wiki + fake CONNECT

2016-08-23 Thread Alex Rousskov
On 08/23/2016 08:34 AM, Marcus Kool wrote: > On 08/23/2016 11:26 AM, Alex Rousskov wrote: >> BTW, please note that you blanket change of letters SSL to letters TLS >> makes wiki diffs nearly useless for review. It is probably too late to >> undo that, but please avoid/delay similar non-changes in

Re: [squid-users] clarifying Features/SslPeekAndSplice on wiki + fake CONNECT

2016-08-23 Thread Marcus Kool
On 08/23/2016 11:26 AM, Alex Rousskov wrote: On 08/23/2016 07:59 AM, Marcus Kool wrote: On 08/23/2016 12:44 AM, Alex Rousskov wrote: On 08/22/2016 08:14 PM, Marcus Kool wrote: When I think I am done, I will let you know for a review. It is best to commit all your intended changes at once

Re: [squid-users] clarifying Features/SslPeekAndSplice on wiki + fake CONNECT

2016-08-23 Thread Alex Rousskov
On 08/23/2016 07:59 AM, Marcus Kool wrote: > On 08/23/2016 12:44 AM, Alex Rousskov wrote: >> On 08/22/2016 08:14 PM, Marcus Kool wrote: >>> When I think I am done, I will let you know for a review. >> It is best to commit all your intended changes at once (if at all) >> rather than to use the

Re: [squid-users] dynamic group using URI as group name on external acl with ext_ldap_group_acl

2016-08-23 Thread Amos Jeffries
On 23/08/2016 7:56 a.m., Diogenes S. Jesus wrote: > Hi there. First thanks for taking the time to thoroughly reply to it. > >>> external_acl_type ldap_HTTP %LOGIN %URI >>> /usr/lib/squid/ext_ldap_group_acl -D "cn=admin,dc=example,dc=com" -w >>> test -R -b "ou=authorization,dc=example,dc=com" -B

Re: [squid-users] clarifying Features/SslPeekAndSplice on wiki + fake CONNECT

2016-08-23 Thread Marcus Kool
On 08/23/2016 12:44 AM, Alex Rousskov wrote: On 08/22/2016 08:14 PM, Marcus Kool wrote: Thanks for your reply. I will start changing the wiki page. When I think I am done, I will let you know for a review. It is best to commit all your intended changes at once (if at all) rather than to use