[squid-users] User failing to authenticate over NTLM

2007-09-25 Thread Paul Cocker
Running SquidNT 2.6 STABLE 16 since yesterday and everything is running smoothly. You must be member of global domain group X to authenticate, using NTLM and the user details of the currently logged on user. However, we have a new user on the system. He has been added into the relevant group and

[squid-users] Trick about SMB_AUTH in DOMAIN CONTROLLER

2007-09-25 Thread Fabio Prando Bortolotto
Hy Guys, Afterwards sorry about my English because I'm still learning And Hello All, Well, I has been searching from the lists and on the INTERNET, about this solution: I have two server with SAMBA (PDC and BDC) and all my database users is in LDAP, and I have one firewall which have squid

[squid-users] Re: Caching downloaded files from dynamic pages

2007-09-25 Thread RW
On Tue, 25 Sep 2007 17:17:45 +1200 (NZST) Amos Jeffries [EMAIL PROTECTED] wrote: And even though my store.log displays, that it actually saved something (filesize matches, 1263443 bytes), I cannot find the file and all downloads from Fujitsu-Siemens are coming from their site, not from

[squid-users] Re: Exchange 2003 RPC Over HTTPS

2007-09-25 Thread Shekhar Gupta
Can any one give me a clue on this ?? On 9/23/07, Shekhar Gupta [EMAIL PROTECTED] wrote: I am having following problem with squid acting as reverse proxy for my OWA and RPC server . Both OWA and RPC is having the same hostname as of now . I am able to get it worked with OWA however as shown

Re: [squid-users] User failing to authenticate over NTLM

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 11:34 +0100, Paul Cocker wrote: I've checked the access log and see a lot of lines which look like 1190708486.534 0 191.9.222.107 TCP_DENIED/407 1840 GET http://www.microsoft.com/isapi/redir.dll? - NONE/- text/html 1190708486.565 0 191.9.222.107

Re: [squid-users] Trick about SMB_AUTH in DOMAIN CONTROLLER

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 07:50 -0300, Fabio Prando Bortolotto wrote: If my users connect into my DOMAIN they are able to access the INTERNET, but if they don't connect INTO my DOMAIN they are note allowed to access the INTERNET.. It's not easy as in both cases the user provides his login and

[squid-users] Rewrite host header active for some URLs and inactive for others

2007-09-25 Thread jsianes
Hello, I'm trying to configure a Squid 2.6 service in order to manage rewrite using squirm. The problem is that the directive that controls this caracteristic for the host header rewrite is global for the squid service (redirect_rewrites_host_header) and what I want is that for some URLs the

[squid-users] Re: Redirecting before certificate handling

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 09:31 -0700, Srinivas B wrote: I know that squid can't have multiple certs for single [IP]:port. True, due to SSL being at the TCP level, long before the HTTP request is known. There is some recent extensions to SSL to overcome this restriction of SSL, but it has not yet

Re: [squid-users] Rewrite host header active for some URLs and inactive for others

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 18:03 +0200, [EMAIL PROTECTED] wrote: Hello, I'm trying to configure a Squid 2.6 service in order to manage rewrite using squirm. The problem is that the directive that controls this caracteristic for the host header rewrite is global for the squid service

Re: [squid-users] Exchange 2003 RPC Over HTTPS

2007-09-25 Thread Henrik Nordstrom
On sön, 2007-09-23 at 19:59 +0530, Shekhar Gupta wrote: Both OWA and RPC is having the same hostname as of now . I am able to get it worked with OWA however as shown on wiki for RPC i tried with option RPC-DATA-IN and OUT , but that din't worked , every time i change my outlook to new reverse

RE: [squid-users] Re: Caching downloaded files from dynamic pages

2007-09-25 Thread Alexander K
Thank you for the tip, I think I got little bit further, but still no success. After strip_query_terms off I can now see more information in my access.log. This is the process after I have clicked the file I want, accepted the license, pressed Download software and finished the download.

Re: [squid-users] Trick about SMB_AUTH in DOMAIN CONTROLLER

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 14:16 -0300, Fabio Prando Bortolotto wrote: I was thinking about creating a database or file and everytime when the user connect into my DOMAIN they will putt theier MAC address or their IP address and his names and after that I create a script which every minute the

[squid-users] Re: Redirecting before certificate handling

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 10:45 -0700, Srinivas B wrote: My question is, I use one https_port with certs matching domain xyz.mydomain.com Our firewall is configured such a way that https requests coming to xyz.mydomain.com and abc.mydomain.com are forwarded to squid. can I use

RE: [squid-users] Re: Caching downloaded files from dynamic pages

2007-09-25 Thread Henrik Nordstrom
On tis, 2007-09-25 at 21:34 +0300, Alexander K wrote: The last one is interesting; I can actually see the full uri, which is good. If I use the full uri: http://support.fujitsu-siemens.com/download/FileDownload/fileDownload.aspx?S

Re: [squid-users] Acl for blocking sites not working - what can i DO?

2007-09-25 Thread Chris Robertson
Abd-Ur-Razzaq Al-Haddad wrote: Hi all I've got 2.6 stable running on OpenSuse 10.2 I can't seem to get the squid to use the internal acls to block sites/domains.. how can this be achived? Squid.conf SNIP acl lcl src 192.168.0.0/16 acl NTLMUsers proxy_auth REQUIRED acl blocksites

Re: [squid-users] automatic startup

2007-09-25 Thread Chris Robertson
Melanie Pfefer wrote: Squid Cache: Version 2.6.STABLE3 OS: 2.6.11-1.1369_FC4 Hi, How to enable automatic startup for squid upon system boot? Assuming that you installed Squid from an RPM, chkconfig squid on will do the trick. Otherwise, find attached a startup script that should

Re: [squid-users] URL redirect

2007-09-25 Thread Chris Robertson
Srinivas B wrote: Hi All, I need URL redirect for a particular url_regex. I have my squid.conf to include below lines acl rewrite url_regex pattern1 acl rewrite url_regex pattern2 url_rewrite_access allow rewrite url_rewrite_program path to script I want to know, what are the variables

[squid-users] delay_parameters Suggestion

2007-09-25 Thread Lazuardi Nasution
Hi all, I want to limit each user by the following behavior. Size 256 KB - no limitation Size 256 KB - 4 KB/s rate (32 kbps) Any suggestion of delay_parameters ? I put delay_parameters -1/-1 4096/262144 of class 2 delay pools. Am I right ? Do the Size mean the size per connection of each

[squid-users] Re: Caching downloaded files from dynamic pages

2007-09-25 Thread RW
On Tue, 25 Sep 2007 22:54:02 +0200 Henrik Nordstrom [EMAIL PROTECTED] wrote: Note: Squid-3 has a refresh_pattern override for overriding overriding Cache-Control: private. ignore-private is in 2.6 too.

[squid-users] squid 2.6 and squidguard 1.2.0 problems

2007-09-25 Thread chteh
Dear all, (Try googling for more than 2 days, problems still persists J) I have a problem on using squid guard in my proxy server (squid 2.6). Let me go straight to my question: I have installed squid 2.6 stable 6.4 in CentOS 5 using yum and installed squidguard using dag repository. Both