RE: [squid-users] Action Canceled

2004-07-27 Thread pierre-yves miroux
Hi, I tried the "Friendly HTTP error messages" with no luck. Thanks. == Pierre Yves Miroux Responsable Informatique SIN et STES 01 49 38 32 32 fax: 01 49 38 46 23 == -Message d'origine- De : Elsen Marc [mailto:[EMAI

RE: [squid-users] Linux 2.6 Kernel. Any benefits?

2004-07-27 Thread Hwee Khoon, Neo
Hmm, 2 conflicting ovservation. Any other squid users care to share their findings? On Wed, 23 Jun 2004, Lizzy Dizzy wrote: > Has anybody switched from a 2.4 kernel to a 2.6 kernel? Do you really see a > performance boost in squid? >From the early attempts there still seems to be problems get

RE: [squid-users] Re: Transparent authentication using Samba+Squid+NTLM Parent proxy

2004-07-27 Thread Van Hoorenbeeck, Peter (RST/Hammerstone EMEA)
Hey Adam, I considered using the APS some time ago, but I thought the smb+squid solution would be more reliable. Thanks for your feedback though... I got the application to authenticate to the parent proxy now (however the APS fails from time to time and my application does not work 100% yet). Th

Re: [squid-users] Fedora Core 2 and Wccp 1 support

2004-07-27 Thread unixware
> > FATAL: Module ip_wccp not found. > > > > module is automatically copied to > > /lib/modules/2.6.5-1.358custom/extra/ip_wccp.ko > > and what kernel are you currently running? > > You MUST compile and run your own kernel to build > third-party modules in a > sane manner. i am using default

[squid-users] can i use SQUID for Caching Only..

2004-07-27 Thread Kiran Maraju
Hi ppl, can i get the solutions for the following questions.pls.help me out... Browser(Clients ) Squid box proxy box(apache) --- Real servers( Internet) 1) i am running apache as proxy server. i want to use squid only for caching not for proxying. is it possible? how

[squid-users] Blocking Virus

2004-07-27 Thread davidkandou
Dear all, Can anybody tell me how to install free anti virus for squid server. (in mailserver i already install free AV Clamav). Thank's David

RE: [squid-users] RE: User with Chinese LDAP CN does not work

2004-07-27 Thread Huang, David
Hello, the feedback after using -d [EMAIL PROTECTED] libexec]# ./squid_ldap_auth -d -R -b "dc=mtuzhuhai,dc=com" -D "cn=zpc9998t,ou=it,dc=mtuzhuhai,dc=com" -w abcdefg -h 53.12.2.13 -p 389 -f "(&(sAMAccountName=%s)(objectclass=user))" zpc9996t secretpassword user filter '(&(sAMAccountName=zpc999

Re: [squid-users] Linux 2.6 Kernel. Any benefits?

2004-07-27 Thread Bruno Marcondes
I'm running smoothly a RH 9 server with kernel 2.6.6 and squid 2.5 stable 4, with great improvements on VM handling , before kernel 2.6 it use to swap even thou I don't have a memory shortage . []'s On Wed, 23 Jun 2004 06:11:25 +, Lizzy Dizzy <[EMAIL PROTECTED]> wrote: > Hi All, > > I am ke

RE: [squid-users] RE: User with Chinese LDAP CN does not work

2004-07-27 Thread Henrik Nordstrom
On Tue, 27 Jul 2004, Huang, David wrote: > For users with Chinese LDAP CN name in the windows 2000 AD, I tried > squid_ldap_auth in the commmand line, but it does not work, I guess this > is not a problem with IE setting, > > auth_param basic program /usr/lib/squid/squid_ldap_auth -R -b "dc=mtuzh

Re: [squid-users] maxconn

2004-07-27 Thread Henrik Nordstrom
On Tue, 27 Jul 2004, Sergey Matveychuk wrote: > It works, but I have about five hundreds hosts in 172.16.0.0/19. No > other way except add every host in squid.conf? Your first attempt makes a limit of 15 connections PER IP, and is what you want. Regards Henrik

RE: [squid-users] ldap auth testing

2004-07-27 Thread Henrik Nordstrom
On Tue, 27 Jul 2004, Rick Whitley wrote: > Thanks for the info. When I run ldapsearch I get the following message: > > SASL/EXTERNAL authentication started > ldap_sasl_interactive_bind_s: unknown authentication method (86) > additional info: SASL(-4): no mechanism available: man ldapsearch

Re: [squid-users] IWSS + squid-icap

2004-07-27 Thread Henrik Nordstrom
On Tue, 27 Jul 2004, Dave Raven wrote: > Saw some mention on the lists of a patch needed to use IWSS, is it > possible to just change an option on the Trend server to fix it? IWSS has additional demands on the ICAP implementation which can not be fulfilled by the ICAP patch published by HP Labs i

Re: [squid-users] Fedora Core 2 and Wccp 1 support

2004-07-27 Thread Henrik Nordstrom
On Mon, 26 Jul 2004, unixware wrote: > > 4) then in /root directory modprobe ip_wccp > > i get following error modprobe ip_wccp > > FATAL: Module ip_wccp not found. > > module is automatically copied to > /lib/modules/2.6.5-1.358custom/extra/ip_wccp.ko and what kernel are you currently runni

Re: [squid-users] squid_ldap_auth

2004-07-27 Thread Henrik Nordstrom
Right. The LDAP Helpers update patch to 2.5.STABLE6 was quite broken. Should be fixed now (Bug #1018). Regards Henrik On Mon, 26 Jul 2004, Neil Wilson wrote: > I have tried using a non daily autogenerated realease, but a stable 2.5 > version and now I dont get the same problem. > > Thanks! >

Re: [squid-users] How to increase TCP-HIT ratio

2004-07-27 Thread Michal Weinfurtner
maes wrote: ... My worst problem is about images. I realy don't have any idea, why some images are not loaded :-( Do You think taht cache size a memory uasge can be a reason ? What logged for those images in your access.log ? Can you show us some entries ? Hello, i'm back. I make some tests

Re: [squid-users] Fw: Re: Re: Re: More NTLM Problems

2004-07-27 Thread Johnny Doe
I'm not sure whats going on. I just put a clean fedora 2 install on the box and I am getting the same exact problem. I have no idea what I'm doing wrong but there is def something wrong. The only thing I find wierd is that I am trying to use this with dansguardian and if I stop dansguardian and

RE: [squid-users] ldap auth testing

2004-07-27 Thread Rick Whitley
Here is my test: proxy2:ldapsearch -v -D "cn=LDAPUser,ou=academics,o=dbu" -W -h 10.5.10.215 "(cn=*) cn sn ldap_init( 10.5.10.215, 0 ) Enter LDAP Password:xx SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: unknown authentication method (86) additional info: SASL(-4

Re: [squid-users] Hardware spec.

2004-07-27 Thread Christoph Haas
On Tue, Jul 27, 2004 at 10:31:25AM -0700, spivkid wrote: > I have a network with 8,000 users. I look to purchase > two boxes to put on the for high aviablity. But I > wanted to know how to determain what type a box to > get, dual p4?, 1gig mem, 80gig, etc. Our network has 5000 users. It ran comp

[squid-users] Re: acl based on NT groups

2004-07-27 Thread Adam Aube
Jeff Heckart wrote: > I am trying to create various levels of access to users based on the NT > group that they are in. I am successfully using NTLM auth and am on > 2.5STABLE4. Use the appropriate external_acl group helper - wb_group for Samba 2.2.x and wbinfo_group for Samba 3. This is (somewh

Re: [squid-users] acl based on NT groups

2004-07-27 Thread Serassio Guido
Hi, At 13.34 27/07/2004, Jeff Heckart wrote: Hello, I have researched the documentation and have not quite been able to come up with a definitive answer to this question. I am trying to create various levels of access to users based on the NT group that they are in. I am successfully using NTLM au

[squid-users] Re: maxconn

2004-07-27 Thread Adam Aube
Sergey Matveychuk wrote: > Just tell me how it must work? > acl localnet src 172.16.0.0/19 > acl conn_15 maxconn 15 > http_access deny localnet conn_15 > It looks like it limits connections to 15 from all 172.16.0.0/19. > It's not possible to limit connection numbers from one IP? With those acl

[squid-users] Re: Hardware spec.

2004-07-27 Thread Adam Aube
spivkid wrote: > I have a network with 8,000 users. I look to purchase > two boxes to put on the for high aviablity. But I > wanted to know how to determain what type a box to > get, dual p4?, 1gig mem, 80gig, etc. The two biggest considerations for Squid boxes are RAM and disks, because Squid

[squid-users] Fw: Re: Re: Re: More NTLM Problems

2004-07-27 Thread Adam Aube
Please reply to the list and not to me personally. Johnny Doe wrote: > --- Adam Aube <[EMAIL PROTECTED]> wrote: >> Since you didn't explicitly show it, I'm going to guess that you did a >> "su squid" before running wbinfo. >> Have you added any winbind lines to nsswitch.conf or PAM? If all you

[squid-users] Hardware spec.

2004-07-27 Thread spivkid
I have a network with 8,000 users. I look to purchase two boxes to put on the for high aviablity. But I wanted to know how to determain what type a box to get, dual p4?, 1gig mem, 80gig, etc. I read on squid site that squid does not benefit from a dual box. What have you guys notice in the fiel

Re: [squid-users] slackware question

2004-07-27 Thread Christoph Haas
On Tue, Jul 27, 2004 at 07:05:38PM +0300, Costas Zacharopoulos wrote: > What is the prefered cache_dir option for a ext2 filesystem on a > slackware machine? Depends on your number of users, the disk size, the RAID system, the disk controller, your expected traffic... http://www.squid-cache.org/

[squid-users] slackware question

2004-07-27 Thread Costas Zacharopoulos
What is the prefered cache_dir option for a ext2 filesystem on a slackware machine?

[squid-users] IWSS + squid-icap

2004-07-27 Thread Dave Raven
Hello all, Saw some mention on the lists of a patch needed to use IWSS, is it possible to just change an option on the Trend server to fix it? Or do we defiantly need the patch? If so, please can someone tell me how to get the patch - on the list it says email protected for the contact Hend

[squid-users] IWSS + squid-icap

2004-07-27 Thread Dave Raven
Hello all, Saw some mention on the lists of a patch needed to use IWSS, is it possible to just change an option on the Trend server to fix it? Or do we defiantly need the patch? If so, please can someone tell me how to get the patch - on the list it says email protected for the contact Hend

RE: [squid-users] ldap auth testing

2004-07-27 Thread Chris Perreault
What did you type at the prompt? It seems like a parameter is missing. (perhaps the authentication method) ldapsearch --help gives a list of options. Chris -Original Message- From: Rick Whitley [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 27, 2004 11:42 AM To: [EMAIL PROTECTED]; Chris

RE: [squid-users] ldap auth testing

2004-07-27 Thread Rick Whitley
Thanks for the info. When I run ldapsearch I get the following message: SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: unknown authentication method (86) additional info: SASL(-4): no mechanism available: Any thoughts? rick... Rom.5:8 >>> Chris Perreault <[EMAIL PROTE

[squid-users] some questions

2004-07-27 Thread johon Doe
Hi, I'm a new squid user. I have some problem to configure it. Well the server is inside a lan of 70-100 pc and the traffic should be quiet low (600MB per day) Those are the problems: 1) I'd like to cache some html static pages so that i used the refresh_pattern tag: refresh_pattern -i html$ 3880 1

RE: [squid-users] ldap auth testing

2004-07-27 Thread Chris Perreault
Go to the source code's helper/basic_auth/LDAP directory and check out the README there. Run the ldap auth helper outside of squid, and see if you are reaching the ldap server or do a ldapsearch to make sure you can reach the ldap directory. (man ldapsearch) >From my experience, and from what I've

RE: [squid-users] ldap auth testing

2004-07-27 Thread Rick Whitley
I restarted squid with the command options listed, but I don't get any ldap info. I don't get any info at all. Here is what the access.log file lists: 1090917920.55722 10.5.200.201 TCP_DENIED/407 1765 GET http://www.mozilla.org/products/firefox/start/ ctdlaptop NONE/- text/html The login

RE: [squid-users] Using RAID 0 for cache

2004-07-27 Thread Elsen Marc
> > Hi there, > > I am setting up Squid 2.5Stable5 at the moment, using four > hard drives (2 > mirrored for OS, 2 striped for squid cache). > But I am not sure though for I have read that striping is not > recommended > for use with the cache squid gnerates. > Is that true? And if it is, wh

[squid-users] Using RAID 0 for cache

2004-07-27 Thread Altrock, Jens
Hi there, I am setting up Squid 2.5Stable5 at the moment, using four hard drives (2 mirrored for OS, 2 striped for squid cache). But I am not sure though for I have read that striping is not recommended for use with the cache squid gnerates. Is that true? And if it is, why is that? For I see only

Re: [squid-users] Re: Re: Re: More NTLM Problems

2004-07-27 Thread Johnny Doe
Yeah I have the perms on that dir to 0750 with squid as the group owner. Also have the user squid in the squid group. --- [EMAIL PROTECTED] wrote: > Quoting Adam Aube <[EMAIL PROTECTED]>: > > > Johnny Doe wrote: > > > --- Adam Aube <[EMAIL PROTECTED]> wrote: > > >> Johnny Doe wrote: > > >>> ---

RE: [squid-users] Action Canceled

2004-07-27 Thread Elsen Marc
> > > Hi, > > The problem is that, when i do not go through Squid, > i have no problem. The page is displayed correctly > through the browser (oops: forgot that crucial point). > Ok, that does not mean that the indicative action(s) which I suggested are not meanin

[squid-users] acl based on NT groups

2004-07-27 Thread Jeff Heckart
Hello, I have researched the documentation and have not quite been able to come up with a definitive answer to this question. I am trying to create various levels of access to users based on the NT group that they are in. I am successfully using NTLM auth and am on 2.5STABLE4. Is there a way?

RE: [squid-users] Action Canceled

2004-07-27 Thread pierre-yves miroux
Hi, The problem is that, when i do not go through Squid, i have no problem. The page is displayed correctly through the browser (oops: forgot that crucial point). == Pierre Yves Miroux Responsable Informatique SIN et STES 01 49 38 32 32 f

RE: [squid-users] Action Canceled

2004-07-27 Thread Elsen Marc
> > Hello, > > We have been using Squid 2.4 STABLE6 since beginning of the year > wthout any problem. > Since sometimes now, we have problem with some HTML pages > built by our ERP PeopleSoft. > We get eror messages like "ACTION CANCELED" from IE 6SP1, and >

RE: [squid-users] RE: User with Chinese LDAP CN does not work

2004-07-27 Thread Huang, David
Hello, For users with Chinese LDAP CN name in the windows 2000 AD, I tried squid_ldap_auth in the commmand line, but it does not work, I guess this is not a problem with IE setting, auth_param basic program /usr/lib/squid/squid_ldap_auth -R -b "dc=mtuzhuhai,dc=com" -D "cn =zpc9998t,ou=it,dc=mt

[squid-users] Action Canceled

2004-07-27 Thread pierre-yves miroux
Hello, We have been using Squid 2.4 STABLE6 since beginning of the year wthout any problem. Since sometimes now, we have problem with some HTML pages built by our ERP PeopleSoft. We get eror messages like "ACTION CANCELED" from IE 6SP1, and 5

Re: [squid-users] maxconn

2004-07-27 Thread Sergey Matveychuk
Jay Turner wrote: Will acl localnet src 172.16.0.0/19 acl ahost src 172.16.1.1 acl conn_15 maxconn 15 http_access deny ahost conn_15 http_access allow localnet or similar not work for you? It works, but I have about five hundreds hosts in 172.16.0.0/19. No other way except add every host in s

RE: [squid-users] maxconn

2004-07-27 Thread Jay Turner
Will acl localnet src 172.16.0.0/19 acl ahost src 172.16.1.1 acl conn_15 maxconn 15 http_access deny ahost conn_15 http_access allow localnet or similar not work for you? > -Original Message- > From: Sergey Matveychuk [mailto:[EMAIL PROTECTED] > Sent: Tuesday, 27 July 2004 3:28 PM >

[squid-users] maxconn

2004-07-27 Thread Sergey Matveychuk
Just tell me how it must work? acl localnet src 172.16.0.0/19 acl conn_15 maxconn 15 http_access deny localnet conn_15 It looks like it limits connections to 15 from all 172.16.0.0/19. It's not possible to limit connection numbers from one IP? -- Sem.