Re: [squid-users] could any1 advise?

2004-03-04 Thread unixware
> How to checked services running on a squid proxy > server? what is the > command? Is it "top"? > By the way, may i also know how to recognise those > important services, > software and/or applications running on a server? I > have only installed > SuSE Linux 8.0 and squid? one way to check what

Re: [squid-users] cache peers

2004-03-04 Thread unixware
> I am looking for other cache servers in the > United States that I can > peer with. Does anyone have a list or know where I > can find any. > > Thanks, Jonathan Carpenter http://www.ircache.net Servers provide peering facility Regards >

Re: [squid-users] could any1 advise?

2004-03-04 Thread Winston . Tan
hi How to checked services running on a squid proxy server? what is the command? Is it "top"? By the way, may i also know how to recognise those important services, software and/or applications running on a server? I have only installed SuSE Linux 8.0 and squid? Thanks Winston This message

Re: [squid-users] external acl helper

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, Ilya wrote: > How can I use such parameters as %{Header}, etc. to get basic > authentication credentials and to pass them to external acl > helper? Why would you want to do this? Anyway, the Basic authentication request header is Proxy-Authorization, which in terms of ext

Re: [squid-users] squid 2.5, ldap and ssl

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, Barns,R wrote: > I have squid 2.5 working with ldap authentication in a test environment. > If I understand correctly what I have read in FAQ 23.1 when the > username/password pair is passed from the user's browser to squid it is > unencrypted and hence at risk of interception.

Re: [squid-users] authentication with groups

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, Doug Kite wrote: > So then do I need two acls, one to do basic auth as such: > acl foo proxy_auth REQUIRED No, just the group acl. > Does the auth_param directive replace the authenticate_program directive? Yes. See the release notes or the Squid FAQ. > could not find auth_

Re: [squid-users] transparent proxy with server box itself: SOLVED!!!

2004-03-04 Thread Sergio Belkin
El Jueves 04 Marzo 2004 07:56, Henrik Nordstrom escribió: >HN On Wed, 3 Mar 2004 [EMAIL PROTECTED] wrote: >HN >HN > When I lsmod, I see ipnat among the loaded modules. Does this mean > that HN > local NAT is enabled? >HN >HN No, it just means that NAT is. >HN >HN There is a special kernel com

[squid-users] cache peers

2004-03-04 Thread Jonathan Carpenter
Hello, I am looking for other cache servers in the United States that I can peer with. Does anyone have a list or know where I can find any. Thanks, Jonathan Carpenter

[squid-users] external acl helper

2004-03-04 Thread Ilya
Hello! How can I use such parameters as %{Header}, etc. to get basic authentication credentials and to pass them to external acl helper? wbr, Ilya

Re: [squid-users] high cpu load on Xeon 2.66 with only 3Mbit traffic

2004-03-04 Thread thor
no, I am not doing any RAID on this system, neither in hw or sw.. On Thu, Mar 04, 2004 at 11:46:59AM -0500, Donald Pandori wrote: > Are you doing anything on the box with software RAID or is everything done in > hardware? > > -- Original Message --- > From: [EMAIL PROTECTED] > T

Re: [squid-users] authentication with groups

2004-03-04 Thread Doug Kite
>>> Henrik Nordstrom wrote on 03/04/04 10:12AM >>> >See the auth_param directive, and/or the Squid FAQ chapter on >authentication. > >You need to tell Squid how it is supposed to verify the login details. Ok, I was thinking the external_acl_type was all you needed. So, I have added: auth_param

[squid-users] squid 2.5, ldap and ssl

2004-03-04 Thread Barns,R
I have squid 2.5 working with ldap authentication in a test environment. If I understand correctly what I have read in FAQ 23.1 when the username/password pair is passed from the user's browser to squid it is unencrypted and hence at risk of interception. To protect against this we are consideri

Re: [squid-users] Users prompted for credential when using NTML auth.

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004 [EMAIL PROTECTED] wrote: > As per the advice given below, I have reconfigured squid with the > following, having installed Samba 3.0.2: > > auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp > auth_param ntlm children 5 > auth_param ntlm max_challeng

Re: [squid-users] authentication with groups

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, Doug Kite wrote: > This must be the problem. At the risk of sounding dense, I thought what I had > done above *WAS* configuring authentication. What else needs to be done? To > answer the question, no the above config is all I have done. See the auth_param directive, and/or th

Re: [squid-users] URL can not be retrieved

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, Rakesh Kumar wrote: > When I am getting messages : URL: / cannot be retrieved while accessing > accelerated host. The hostname /ip is stripped. While as mormal proxy (in > forward direction/caching) works Ok.I went through the squid mail archive > which suggests some caching is

Re: [squid-users] ICAP support dose not work in squid 2.5 stable 4 & 5

2004-03-04 Thread Henrik Nordstrom
For IWSS you need the icap_streaming patch. As indicated in an earlier message this ICAP client implementation is not yet 100% released. If you are interested in this please contact [EMAIL PROTECTED] Regards Henrik On Thu, 4 Mar 2004, Alexander Kozlov wrote: > I installed and configured TrendM

Re: [squid-users] Squid + ICAP status / feedback

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, olivier wrote: > . ICAP support: will icap be integrated in the 3.* series ? Probably at some point yes, but not for the 3.0 release as this is already feature frozen and in addition there is no ICAP implementation for Squid-3 yet. > . At the moment it is available as a patch

Re: [squid-users] Users prompted for credential when using NTML auth.

2004-03-04 Thread aanderson
As per the advice given below, I have reconfigured squid with the following, having installed Samba 3.0.2: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minu

Re: [squid-users] Prevent ouside access to logs

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, michel lodap wrote: > Is there a way , within squid.conf, to prevent users from reading the daily > logs generated by sarg (/var/www/html/squid) from any client machines? In what way is the client machines having access to the sarg logs? Ah, you are running an Apache web ser

Re: [squid-users] authentication with groups

2004-03-04 Thread Doug Kite
>>> Henrik Nordstrom wrote on 03/04/04 01:48AM >>> >> external_acl_typeunix_group %LOGIN /usr/lib/squid/squid_unix_group -p >> acl full_access external unix_group web >> http_access allow full_access >> >> When I try to browse from a client, it does not prompt me for a username or >> passwor

[squid-users] URL can not be retrieved

2004-03-04 Thread Rakesh Kumar
When I am getting messages : URL: / cannot be retrieved while accessing accelerated host. The hostname /ip is stripped. While as mormal proxy (in forward direction/caching) works Ok.I went through the squid mail archive which suggests some caching issue. My squid.conf has following configuration:

Re: [squid-users] Problem with quick_abort_min -1 KB

2004-03-04 Thread M J
OK I will use a quick_abort_pct of 50%, I think is better. Thanks for your Tip, From: Henrik Nordstrom <[EMAIL PROTECTED]> To: M J <[EMAIL PROTECTED]> CC: [EMAIL PROTECTED] Subject: Re: [squid-users] Problem with quick_abort_min -1 KB Date: Wed, 3 Mar 2004 22:11:33 +0100 (CET) On Wed, 3 Mar 2004

[squid-users] ICAP support dose not work in squid 2.5 stable 4 & 5

2004-03-04 Thread Alexander Kozlov
I installed and configured TrendMicro Interscan Web Security Suite ICAP Server, and configured squid to use it. After several requests the squid server generated an error: . This situation occurred in squid 2.5 stable 4 & 5, but not occurred in previous releases (I checked stable 1 & 3). Here

[squid-users] Squid + ICAP status / feedback

2004-03-04 Thread olivier
Hi, I'm now giving a look at Squid's ICAP support and have a few questions about it: . ICAP support: will icap be integrated in the 3.* series ? . At the moment it is available as a patch for 2.5, given a new 2.5 has been released recently, will it need to be updated ? are there p

Re: [squid-users] Problem Starting Squid

2004-03-04 Thread adrian.wells
Thanks Henk, That was very clear, now I understand :-) Thanks to Mihai too. Kind regards Adrian - Original Message - From: Henrik Nordstrom <[EMAIL PROTECTED]> To: adrian.wells <[EMAIL PROTECTED]> Cc: Mihai BUHA <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, March 01, 2004 4:15

Re: [squid-users] Prevent ouside access to logs

2004-03-04 Thread unixware
> Is there a way , within squid.conf, to prevent users > from reading the daily > logs generated by sarg (/var/www/html/squid) from > any client machines? put authenticaion on your web server ( apache ) squid cannot take care of Sarg. this may be helpful http://httpd.apache.org/docs/howto/auth

RE: [squid-users] Prevent ouside access to logs

2004-03-04 Thread Elsen Marc
> Hi all, > Is there a way , within squid.conf, to prevent users from > reading the daily > logs generated by sarg (/var/www/html/squid) from any client machines? > Thanks in advance That will more depend on your UNIX 'security architecture' ; file prot. e.d Or as on our Intranet : no deem

[squid-users] Prevent ouside access to logs

2004-03-04 Thread michel lodap
Hi all, Is there a way , within squid.conf, to prevent users from reading the daily logs generated by sarg (/var/www/html/squid) from any client machines? Thanks in advance _ MSN Messenger http://g.msn.fr/FR1001/866 : un logiciel gr

SV: [squid-users] Problematic Clients

2004-03-04 Thread Peter Persson
Dear sirs, Automatic proxyconfiguration only seems to work when you have dhcp enabled, i used ethereal to verify this, no traffic at all between client and wpad.domain.local when a static ip is used. ( I don't use the dhcp option only wpad by dns) Is there a possibility that someone could verify

Re: [squid-users] squid an ldap_auth

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004, berrabah abdelrani wrote: > it returns OK but when we used it for squid > authentication We have the message indicationg that > user is not valid. > > authenticate_program /usr/lib/squid/ldap_auth > 127.0.0.1 389 "dc=People,dc=example,dc=com" userid Which Squid version? And

[squid-users] squid an ldap_auth

2004-03-04 Thread berrabah abdelrani
Hello for each; We tried to ldap authentification with squid; he have used ldap_auth; the problem is when we run it from the command shell and we use user-password that is in the directoty ; usr/lib/squid/ldap_auth localhost 389 "ou=People,dc=example,dc=com" userid user1 karaldap OK it returns

Re: [squid-users] Users prompted for credential when using NTML auth.

2004-03-04 Thread Henrik Nordstrom
On Thu, 4 Mar 2004 [EMAIL PROTECTED] wrote: > I have configured squid.conf with the following: > > auth_param ntlm program /usr/lib/squid/ntlm_auth domain\dc > auth_param ntlm children 5 > auth_param ntlm max_challenge_reuses 0 > auth_param ntlm max_challenge_lifetime 2 minutes Please try using

[squid-users] Users prompted for credential when using NTML auth.

2004-03-04 Thread aanderson
Hi, I'm hoping someone can help with this possibly trivial issue. I am trying to configure NTLM authentication on my Redhat 9 box by following the instructions in the new O'Reily squid book... I have configured NTLM authentication with the SMB helper. When I connect to the proxy using IE6sp1 I

[squid-users] Re: Multi Auth requests after successful auth

2004-03-04 Thread Conrad Burger
-- TeBiVo Email disclaimer To view our e-mail legal notice: Go to http://www.tebivo.com/email.htm or call: +27 21 888 7956 -- Thomas-Martin Seck wrote: * Conrad Burge