Re: [squid-users] Proxy authorization

2006-06-23 Thread Henrik Nordstrom
fre 2006-06-23 klockan 15:35 +0100 skrev K Gilpin: > Which method people suggest to use, I do not want anything fancy just > something to make them login to use there web browser. First question to answer: Where do you want the passwords stored? The rest is pretty well explained in the FAQ.. R

Re: [squid-users] Group ACLs

2006-06-23 Thread Henrik Nordstrom
fre 2006-06-23 klockan 08:59 -0300 skrev "Luís Fernando C. Talora": > So, is it possible to create an ACL to group the other ACLs? Something > line an "all_users" ACL containing the "site1_users", "site2_users" ... > and "siteN_users" ACLs, is it possible? It would make a lot easier to > add ne

Re: [squid-users] Re: samba 3.0.20 + squid 2.5 : automatic logon with internet explorer

2006-06-23 Thread Henrik Nordstrom
fre 2006-06-23 klockan 16:22 +0200 skrev Rodolphe A.: > I think I can use ntlm_auth only for a domain AD or NT4. > > my PDC is samba 3.0.20 Samba ntlm_auth should work fine with a Samba PDC. If not complain to the Samba people and they will surely provide a fix for you. Regards Henrik signatur

Re: [squid-users] reverse proxy, 2 backends and vhost

2006-06-23 Thread Henrik Nordstrom
lör 2006-06-24 klockan 00:04 +0200 skrev jb: > Hello; > > This is my sitation : > > I have 2 box with Squid (2.5 on Debian) behind a load balancer. This box do > reverse proxying of one backend server, with vhost enabled. > > *.mysite.com (100 000 subdomains, same IP) -> load balancer > squid b

Re: [squid-users] getpwnam syntax

2006-06-23 Thread Henrik Nordstrom
fre 2006-06-23 klockan 17:20 -0400 skrev Robert Denton: > What a perfect way to end the work week! > > The issue is resolved. The missing piece was to toggle the s bit on > pam_auth. Yes, as documented in the man page.. Regards Henrik signature.asc Description: Detta är en digitalt signerad

[squid-users] reverse proxy, 2 backends and vhost

2006-06-23 Thread jb
Hello; This is my sitation : I have 2 box with Squid (2.5 on Debian) behind a load balancer. This box do reverse proxying of one backend server, with vhost enabled. *.mysite.com (100 000 subdomains, same IP) -> load balancer > squid box > 1 backend server I must add a second backend server te

Re: [squid-users] getpwnam syntax

2006-06-23 Thread Robert Denton
What a perfect way to end the work week! The issue is resolved. The missing piece was to toggle the s bit on pam_auth. chmod ug+s pam_auth So thanks to everyone for contributing to my little problem, and I hope these emails will help others in their quest to pam authenticate their users!

Re: [squid-users] getpwnam syntax

2006-06-23 Thread Robert Denton
No such luck. Here is what I have so far... After installing pam-devel I was able to configure and make squid to use PAM. I also yum updated everything to make sure I wasn't missing anything, and that nothing I had was outdated. I set the auth_param program to use the pam_auth. I chown'd i

Re: [squid-users] getpwnam syntax

2006-06-23 Thread Robert Denton
Terrific, I am making progress on this. The absense of the pam.conf file in /etc is irrelevant since, according to the man page for pam, the mere existence of the pam.d dir will cause pam to completely ignore pam.conf. I have such a dir. However inside there is NO squid file. My plan is t

Re: [squid-users] communication between squid servers

2006-06-23 Thread Chris Robertson
[EMAIL PROTECTED] wrote: Hello, My squid architecture is composed of two internal squid proxies and two external squid parents located in a dmz , all of them on the same physical site. Internal proxies are in charge of authenticating the users (NTLM/AD) and routing to intranets. or to externa

Re: [squid-users] peer weight is not working please help

2006-06-23 Thread Chris Robertson
squid learner wrote: Is this client browser on the Squid machine? If not, then its very likely a routing problem on the Squid machine. > Chris Sir It is routing problem now search try to search the remedy as i show before i put all router in same lan 192.168.1.1<>192.168.1.2<>192.

Re: [squid-users] getpwnam syntax

2006-06-23 Thread Robert Denton
This note may have been a bit premature. I installed pam-devel and the make output is different, although the /etc/squid/libexec directory I was expecting to appear is still not there. A find -name *pam_auth* reveals there is such a file here: ./usr/lib/squid/pam_auth which I suppose wil

Re: [squid-users] getpwnam syntax

2006-06-23 Thread Robert Denton
Hi Henrik, thanks for the quick response! Funny you should suggest PAM. The trouble is that I thought this was the way to go as well in the beginning, but I ended up with a bunch of warnings and errors in the make. I did this for the config script: ./configure --enable-basic-auth-helpers=

RE: [squid-users] Pb ldap with SquidNT

2006-06-23 Thread Guido Serassio
Hi Jerome, At 17.37 23/06/2006, Jerome wrote: OK Guido thanks... I don't use the windows authentificator because I had not understood how it works. But now, I understand ;-) Reading your e-mail I'm not so sure of this :-) I have printing the win32_auth.txt and the win32_check_group.txt

RE: [squid-users] Pb ldap with SquidNT

2006-06-23 Thread Jerome
OK Guido thanks... I don't use the windows authentificator because I had not understood how it works. But now, I understand ;-) I have printing the win32_auth.txt and the win32_check_group.txt and I try... I can't use the win32_auth program because squid do not run on the same server like my AD. So

Re: [squid-users] Using the FTP Method with Login ID and Password

2006-06-23 Thread delloin
ftp://login:[EMAIL PROTECTED] > In the previous millennium, I recall using the FTP method with Squid > and passing the user's login ID and password. Yesterday, a user > needed to use a login ID and password to retrieve content. I > couldn't remember how to do it. > > Can someone provide the synt

[squid-users] Proxy authorization

2006-06-23 Thread K Gilpin
Hi, I have been using squid for a while now and think it is the best product for our use. I now want to look at users having to login to use their Internet. Which method people suggest to use, I do not want anything fancy just something to make them login to use there web browser. Thanks --

[squid-users] Using the FTP Method with Login ID and Password

2006-06-23 Thread Merton Campbell Crockett
In the previous millennium, I recall using the FTP method with Squid and passing the user's login ID and password. Yesterday, a user needed to use a login ID and password to retrieve content. I couldn't remember how to do it. Can someone provide the syntax for passing the login ID and pas

[squid-users] Re: samba 3.0.20 + squid 2.5 : automatic logon with internet explorer

2006-06-23 Thread Rodolphe A.
I think I can use ntlm_auth only for a domain AD or NT4. my PDC is samba 3.0.20 "Rodolphe A." <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > thanks for your answer, but i can't use ntlm_auth only for a domain AD. > > > > <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECT

Re: [squid-users] communication between squid servers

2006-06-23 Thread Robert Denton
Sounds like a job for perl. Write a script that will occationally ping both external proxies and if one goes down the script can modify the hosts file (on both internal proxies) to accomodate. Robert Denton Network Administrator Headsprout 800.401.5062 x1305 www.headsprout.com On Jun 23, 200

Re: [squid-users] beginner question.

2006-06-23 Thread Matus UHLAR - fantomas
On 23.06.06 09:44, Matthieu Cambounet wrote: > I'm trying to setup squid to automatically cache this file : http:// > www.apple.com/trailers/home/xml/current.xml and also to cache the > files linked into this xml file : > > > .. > > http://images.apple.com/moviesxm

Re: [squid-users] https sessions timeout

2006-06-23 Thread Matus UHLAR - fantomas
On 23.06.06 11:56, Owens, Ron wrote: > I am running squid Version 2.5.STABLE12, running on 4 servers. The > clients uses a .pac file to load balance between these 4 servers. > > When I log into a https site, (usually a bank), then the session expires > after a few minutes, telling me I have been

Re: [squid-users] the dreaded 'zero sized reply' on RHEL3

2006-06-23 Thread Craig Home
Neil Sorry, I don't always catch all replies as I've been asking for a few weeks and getting loads of unwanted messages from the list instead of any direct replies I have sent numerous emails to the [EMAIL PROTECTED] over the last four weeks and followed all the relevant instructions on the

[squid-users] Re: samba 3.0.20 + squid 2.5 : automatic logon with internet explorer

2006-06-23 Thread Rodolphe A.
thanks for your answer, but i can't use ntlm_auth only for a domain AD. <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > try ntlm_auth > > Quoting "Rodolphe A." <[EMAIL PROTECTED]>: > > > hello, > > > > samba is setup PDC with ldap > > > > client : windows xp pro sp2 > > server : sa

[squid-users] Group ACLs

2006-06-23 Thread Luís Fernando C. Talora
Fellows, I use Squid with ntlm_auth against an Active Directory server. A few days ago, I´ve replaced the ACL file witch contained the users allowed to use the proxy with 5 new ACLs, one for each site of the company. I did it to organize and turn administration easier. The only problem is tha

Re: [squid-users] samba 3.0.20 + squid 2.5 : automatic logon with internet explorer

2006-06-23 Thread pwasenda
try ntlm_auth Quoting "Rodolphe A." <[EMAIL PROTECTED]>: > hello, > > samba is setup PDC with ldap > > client : windows xp pro sp2 > server : samba 3.0.20 + openldap 2.2 + squid 2.5stable14 + squidGuard > > is it possible to create a, automatic logon with internet explorer ? > > > > > than

Re: [squid-users] Novell lookup

2006-06-23 Thread Visolve Squid
Keith Owen wrote: Can anyone lead me in the right direction. Is there a way for the access.log instead of IP addresses to have user names? We are a "Novell shop". Thanks in advance. Hello Owen, The 8th field of access.log is Ident. If ident_lookup is on, this field may contain the username

[squid-users] https sessions timeout

2006-06-23 Thread Owens, Ron
I am running squid Version 2.5.STABLE12, running on 4 servers. The clients uses a .pac file to load balance between these 4 servers. When I log into a https site, (usually a bank), then the session expires after a few minutes, telling me I have been inactive for over 5 minutes. However, if I poin

[squid-users] samba 3.0.20 + squid 2.5 : automatic logon with internet explorer

2006-06-23 Thread Rodolphe A.
hello, samba is setup PDC with ldap client : windows xp pro sp2 server : samba 3.0.20 + openldap 2.2 + squid 2.5stable14 + squidGuard is it possible to create a, automatic logon with internet explorer ? thanks. -- To unsubscribe from this list go to the following URL and read the instruct

[squid-users] communication between squid servers

2006-06-23 Thread delloin
Hello, My squid architecture is composed of two internal squid proxies and two external squid parents located in a dmz , all of them on the same physical site. Internal proxies are in charge of authenticating the users (NTLM/AD) and routing to intranets. or to external proxies for internet traff

Re: [squid-users] NTLM Auth with Parent Cache

2006-06-23 Thread Henrik Nordstrom
tor 2006-06-22 klockan 21:52 -0500 skrev David Gullett: > I can turn on NTLM auth at any of the branch offices and it will work until > I turn on NTLM auth at the main office. Then the main office will work with > NTLM but the users at the branch offices are being prompted for a username > and pa