[squid-users] Squid with a Active Directory authentification and JAVA client don't authentifie

2006-04-19 Thread Noc Phibee
Hi i have a big problems with my proxy serveur : With IE, that's work very good, but all java appli don't authentifie ! he restart a box with login/password anyone have this problems ? thanks

[squid-users] Editing squid.conf

2006-04-19 Thread nonama
By the way, if I change/edit any of the setting at the squid.conf, for the new setting to take effect, DO I have to run any command or just restart the squid? If need command, what are the commands I have to run? Please advise. TQ. __ Do You

Re: [squid-users] Editing squid.conf

2006-04-19 Thread Mark Elsen
By the way, if I change/edit any of the setting at the squid.conf, for the new setting to take effect, DO I have to run any command or just restart the squid? If need command, what are the commands I have to run? % squid -k reconfigure M.

Re: [squid-users] Squid with a Active Directory authentification and JAVA client don't authentifie

2006-04-19 Thread Mark Elsen
Hi i have a big problems with my proxy serveur : With IE, that's work very good, but all java appli don't authentifie ! he restart a box with login/password anyone have this problems ? - The java applet may not support transferring auth. credentials to SQUID. As a workaround you may

Re: [squid-users] Editing squid.conf

2006-04-19 Thread nonama
Thank you, that means I don't have to restart the squid , rite? --- Mark Elsen [EMAIL PROTECTED] wrote: By the way, if I change/edit any of the setting at the squid.conf, for the new setting to take effect, DO I have to run any command or just restart the squid? If need command, what

Re: [squid-users] Editing squid.conf

2006-04-19 Thread Mark Elsen
Thank you, that means I don't have to restart the squid , rite? Rite. M.

RE: [squid-users] proxy.pac

2006-04-19 Thread Henrik Nordstrom
tis 2006-04-18 klockan 20:42 +0200 skrev Joost de Heer: I think it uses the cached proxy.pac. Yes, but it is almost trivial to make the cached proxy.pac instruct the browser to go direct when not connected to the office network. Regards Henrik signature.asc Description: Detta är en digitalt

RE: [squid-users] Authorisation helper error message tracing

2006-04-19 Thread Henrik Nordstrom
ons 2006-04-19 klockan 08:34 +0100 skrev Holton, Euan: As asked in the OP, is there a debug_level parameter that can be used to trace requests sent to authenticator helper processes? None of the candidates in debug-sections.txt seem quite right, unless section 28 is the one. I would use

Re: [squid-users] rss reader error

2006-04-19 Thread Guillaume
1145369792.263 31 172.16.11.60 TCP_DENIED/407 2143 GET http://www.01net.com/rss/dossiersentreprise.xml - NONE/- text/html Why i have 'NONE/' for the user? You don't. You have a - (no username known). The NONE/- is the hierarchy column.. The username is between the URL and the

Re: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request

2006-04-19 Thread Henrik Nordstrom
tis 2006-04-18 klockan 20:45 +0200 skrev Joost de Heer: That's NTLM handshaking, it's normal behaviour. Blame MS for creating a crappy implementation of the authentication mechanism. Will get better the day we can switch to use Kerberos/SPNEGO authentication.. but unfortunately not yet

Re: [squid-users] Refreshing files in the squid cache on a regular basis?

2006-04-19 Thread Henrik Nordstrom
tis 2006-04-18 klockan 12:51 -0800 skrev Chris Robertson: export http_proxy=http://username:[EMAIL PROTECTED]:3128/ wget -O /dev/null --input-file=/path/to/file/of/imageURLs or you could use squidclient.. squidclient -H Cache-Control: max-age=0\\n -s -u username -w password URL_to_refresh

Re: [squid-users] Working with ACL

2006-04-19 Thread jerry khoo
Henrik, Below is our squid config. Sorry to ask stupid question again, where should the lines go to and if I have few internet sites to be allowed, can I still use acl dstdomain? Will these implementation affect other remote offices that have internet access? Thanks again. Rgds, Jerry acl

[squid-users] Proxy Forward Question?

2006-04-19 Thread Carinus Carelse
I have an Internet Security and acceleration server running at one of my sites what I would like to do is forward the request from that server to a squid server. However The IAS server uses Active directory for authentication and then squid server uses LDAP as it's authentication backend.

Re: [squid-users] rss reader error

2006-04-19 Thread Kinkie
On Wed, 2006-04-19 at 12:53 +0200, Guillaume wrote: I deactivate ntlm support and it works fine. Is there a solution to configure squid to send basic authentication support for some IP/range? No, it's a process-wide all-or-nothing setting. Only way to do that would be to run two squids and

RE: [squid-users] Authorisation helper error message tracing

2006-04-19 Thread Holton, Euan
As asked in the OP, is there a debug_level parameter that can be used to trace requests sent to authenticator helper processes? None of the candidates in debug-sections.txt seem quite right, unless section 28 is the one. I would use debug_options ALL,1 33,2 84,5 29,9 33 ==

[squid-users] SquidNT: running 2 instance of squid on the same server.

2006-04-19 Thread Guillaume
After another discution, i would like to create two squid server on the same server. I create 2 different tree with different parameters i can run the first, but when i try to load the second, i have the following error displayed: 2006/04/19 16:15:50| Squid is already running! Process ID 1596 I

RE: [squid-users] SquidNT: running 2 instance of squid on the same server.

2006-04-19 Thread Jason Gauthier
After another discution, i would like to create two squid server on the same server. I create 2 different tree with different parameters i can run the first, but when i try to load the second, i have the following error displayed: 2006/04/19 16:15:50| Squid is already running! Process

RE: [squid-users] SquidNT: running 2 instance of squid on the same server.

2006-04-19 Thread Holton, Euan
After another discution, i would like to create two squid server on the same server. I create 2 different tree with different parameters i can run the first, but when i try to load the second, i have the following error displayed: 2006/04/19 16:15:50| Squid is already running!

RE: [squid-users] Re: Squid + NTLM and TCP_DENIED for each request

2006-04-19 Thread Ngo, Toan
Thanks for the feedback. Apparently it's going to take a lot of different components to fix NTLM. Toan -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 3:54 AM To: [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Subject: Re:

RE: [squid-users] HTTPS Web SITE TIMEOUT

2006-04-19 Thread Rodrigo Barros
The web site is www.equifax.com.br , but the problem only happens after I authenticate in the site and try to access an specific url (https://novoequifaxpessoal.equifax.com.br/PessoalPlusWeb/login.jsp). The result is always the same: novoequifaxpessoal.equifax.com.br:443 (60) Connection timed

Re: [squid-users] Squid with a Active Directory authentification and JAVA client don't authentifie

2006-04-19 Thread Noc Phibee
Mark Elsen a écrit : Hi i have a big problems with my proxy serveur : With IE, that's work very good, but all java appli don't authentifie ! he restart a box with login/password anyone have this problems ? - The java applet may not support transferring auth. credentials to SQUID. As

[squid-users] Weird username?

2006-04-19 Thread Jason Gauthier
Hey all, Using NTLM auth. I just set up sarg and noticed weird usernames. So, I looked in my squid log, in case they were being parsed weird and I see this: 1145472531.457 0 127.0.0.1 TCP_CLIENT_REFRESH_MISS/200 4569 GET http://server44/squid-reports/ TlRMTVNTUAACB

RE: [squid-users] Advice on private keys and SSL

2006-04-19 Thread Discussion Lists
That is exactly what I needed to know. Thank you very much! -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Saturday, April 15, 2006 1:11 PM To: Discussion Lists Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Advice on private keys and SSL

RE: [squid-users] ldap squid auth

2006-04-19 Thread Henrik Nordstrom
tis 2006-04-18 klockan 22:11 +0530 skrev Remy Almeida: Hi As per you instruction I upgraded to 2.5stable13 till now squid have not crashed but is get some message don't know what it is check the last 2 lines or error message ERROR MESSAGE 2006/04/18 22:04:30| Starting Squid Cache version

RE: [squid-users] HTTPS Web SITE TIMEOUT

2006-04-19 Thread Henrik Nordstrom
ons 2006-04-19 klockan 14:18 -0300 skrev Rodrigo Barros: The web site is www.equifax.com.br , but the problem only happens after I authenticate in the site and try to access an specific url (https://novoequifaxpessoal.equifax.com.br/PessoalPlusWeb/login.jsp). 1145466465.724 6200

Re: [squid-users] Weird username?

2006-04-19 Thread Henrik Nordstrom
ons 2006-04-19 klockan 16:22 -0400 skrev Jason Gauthier: Hey all, Using NTLM auth. I just set up sarg and noticed weird usernames. So, I looked in my squid log, in case they were being parsed weird and I see this: 1145472531.457 0 127.0.0.1 TCP_CLIENT_REFRESH_MISS/200 4569 GET

Re: [squid-users] Transparency and blocking other proxies

2006-04-19 Thread Henrik Nordstrom
ons 2006-04-19 klockan 15:35 -0700 skrev [EMAIL PROTECTED]: Then can we use Shorewall + squid to accomplish this task? Yes, Shorewall like most other firewall products can be instructed to block all Internet access... If this is what you want to do is another question. You still have not

[squid-users] How to make squid to handle more than 2GB log file

2006-04-19 Thread Balu
Hello, I am using squid 2.5.STABLE12 and it crashes when the log file reaches the more than 2GB limit. If I want have more than 2GB log file, What needs to be done? If there is any code changes needed, what should be the file that I shuould be looking into. Please let me know your ideas.

Re: [squid-users] HTTPS Web SITE TIMEOUT

2006-04-19 Thread Bill Jacqmein
Any firewall rules in place upstream from the squid proxy? On 4/19/06, Rodrigo Barros [EMAIL PROTECTED] wrote: The web site is www.equifax.com.br , but the problem only happens after I authenticate in the site and try to access an specific url

Re: [squid-users] Transparency and blocking other proxies

2006-04-19 Thread Dwayne Hottinger
Quoting Henrik Nordstrom [EMAIL PROTECTED]: ons 2006-04-19 klockan 15:35 -0700 skrev [EMAIL PROTECTED]: Then can we use Shorewall + squid to accomplish this task? Yes, Shorewall like most other firewall products can be instructed to block all Internet access... If this is what you want

Re: [squid-users] How to make squid to handle more than 2GB log file

2006-04-19 Thread Chris Robertson
Balu wrote: Hello, I am using squid 2.5.STABLE12 and it crashes when the log file reaches the more than 2GB limit. If I want have more than 2GB log file, What needs to be done? Check out the --with-large-files compile option. If there is any code changes needed, what should be the

Re: [squid-users] How to make squid to handle more than 2GB log file

2006-04-19 Thread Balu
Does this option available for squid 2.5.STABLE12. If I enable the large file support will that squid can be used in prduction environment. Regards, -Balu. --- Chris Robertson [EMAIL PROTECTED] wrote: Balu wrote: Hello, I am using squid 2.5.STABLE12 and it crashes when the log file

Re: [squid-users] Transparency and blocking other proxies

2006-04-19 Thread Henrik Nordstrom
ons 2006-04-19 klockan 20:08 -0400 skrev Dwayne Hottinger: use Novell. Keep us posted on what you find out. Im sure Im not the only network admin at a school that is curious how to keep kids (and teachers) from Skirting around the Internet filter. As always the first line of defense is to

Re: [squid-users] limiting cache to memory only

2006-04-19 Thread dwi amk
comment every line stating cache_dir On 4/17/06, William Bohannan [EMAIL PROTECTED] wrote: Is there part in the config of squid to limit the cache just to memory and not the hard drive?? And to a certain size?? Thanks heaps William Ps also got the transparent bridge working - used

Re: [squid-users] How to make squid to handle more than 2GB log file

2006-04-19 Thread Adrian Chadd
On Wed, Apr 19, 2006, Balu wrote: Does this option available for squid 2.5.STABLE12. If I enable the large file support will that squid can be used in prduction environment. Yup! Adrian

[squid-users] squid-ldap hepl

2006-04-19 Thread Remy Almeida
I have recently started ldap authentication for squid and I get the following message 2006/04/20 09:05:00| WARNING: basicauthenticator #41 (FD 139) exited 2006/04/20 09:05:12| WARNING: basicauthenticator #42 (FD 140) exited 2006/04/20 09:05:47| WARNING: basicauthenticator #43 (FD 141) exited

[squid-users] Squid dying

2006-04-19 Thread Chris Vaughan
Hello, One of the squid proxy servers in our organisation is failing with the following error: fgets() failed! dying. errno=1 (Operation not permitted) [2006/04/20 09:18:06, 1] utils/ntlm_auth.c:manage_squid_request(1594) Squid will restart normally, after this. However it has happened