Re: [squid-users] Is Squid 6 production ready?

2024-01-31 Thread Amos Jeffries
On 1/02/24 11:22, Miha Miha wrote: On 10/01/24 12:18, Miha Miha wrote: Release note of latest Squid 6.6 says: "...not deemed ready for production use..." For comparison Squid 5.1 was 'ready'. When v6 is expected to be ready for prod systems? On Fri, Jan 12, 2024 at 3:37 PM Amos Jeffries

Re: [squid-users] Is Squid 6 production ready?

2024-01-31 Thread Miha Miha
> On 10/01/24 12:18, Miha Miha wrote: > > Release note of latest Squid 6.6 says: "...not deemed ready for > > production use..." For comparison Squid 5.1 was 'ready'. When v6 is > > expected to be ready for prod systems? > > On Fri, Jan 12, 2024 at 3:37 PM Amos Jeffries wrote: > Sorry, that is

Re: [squid-users] Long Group TAG in access.log when using kerberos

2024-01-31 Thread David Touzeau
Thank Alex This will fix the issue! Le 31/01/2024 à 17:43, Alex Rousskov a écrit : On 2024-01-31 09:23, David Touzeau wrote: Hi %note is used by our external_acls and for log other tokens And we use also Group as token. it can disabled by direcly removing source kerberos code before

Re: [squid-users] Squid - Queue overflow

2024-01-31 Thread Alex Rousskov
On 2024-01-29 07:09, Andre Bolinhas wrote: I'm getting this error in cache.log 2024/01/29 14:33:03 kid5| ERROR: Collapsed forwarding queue overflow for kid1 at 1024 items     current master transaction: master2163155 This leads Squid stops filtering or check any of the ACL rules, allowing

Re: [squid-users] Long Group TAG in access.log when using kerberos

2024-01-31 Thread Alex Rousskov
On 2024-01-31 09:23, David Touzeau wrote: Hi %note is used by our external_acls and for log other tokens And we use also Group as token. it can disabled by direcly removing source kerberos code before compiling but i would like to know if there is another way In most cases, one does not have

Re: [squid-users] Long Group TAG in access.log when using kerberos

2024-01-31 Thread David Touzeau
Hi %note is used by our external_acls and for log other tokens And we use also Group as token. it can disabled by direcly removing source kerberos code before compiling but i would like to know if there is another way Le 31/01/2024 à 14:36, Andrey K a écrit : Hello, David, > Anyway to

Re: [squid-users] Long Group TAG in access.log when using kerberos

2024-01-31 Thread Andrey K
Hello, David, > Anyway to remove these entries from the log ? I think you should correct logformat directive in your squid configuration to disable annotations logging (%note): http://www.squid-cache.org/Doc/config/logformat/ Kind regards, Ankor. ср, 31 янв. 2024 г. в 15:51, David

Re: [squid-users] Long Group TAG in access.log when using kerberos

2024-01-31 Thread David Touzeau
Anyway to remove these entries from the log ? Le 31/01/2024 à 10:01, Andrey K a écrit : Hello, David, group values in your logs are BASE64-encoded binary AD-groups SIDs. You can try to decode them by a simple perl script sid-reader.pl (see below): echo

Re: [squid-users] Long Group TAG in access.log when using kerberos

2024-01-31 Thread Andrey K
Hello, David, group values in your logs are BASE64-encoded binary AD-groups SIDs. You can try to decode them by a simple perl script sid-reader.pl (see below): echo AQUAAAUVCkdDGG1JBGW2KqEShhgBAA== | base64 -d | perl sid-reader.pl And finally convert SID to a group name: wbinfo -s