[squid-users] ACLs based on users based on Samba PDC?

2008-11-01 Thread Adam McCarthy
After much fussing, I seem to have a working Squid 2.6 working against a Samba 3 PDC. My only question is now, can I say, ok, if you finds my username, give it complete access. Then perhaps, if it sees user, "bob" perhaps, then it says, only give them windowsupdate.microsoft.com. Then if it sees

[squid-users] no response from squid while telnetting

2008-11-01 Thread anujstha
hiii, i m using squid Version 3.0.STABLE9, while i telnet on the squid box then it only shows [EMAIL PROTECTED] ~] % telnet proxy1.zodiac.com.np 80 Trying 202.79.40.131... Connected to proxy1.zodiac.com.np. Escape character is '^]'. it doesn't send any bad error as older squid did. [EMAIL

Re: [squid-users] Questions on research into using digest auth against MS AD2003

2008-11-01 Thread Chuck Kollars
> > ... Digest authentication is a hashed authentication scheme, > > exchanging one-time hashes instead of passwords on the wire. ... Please excuse what may be a real dumb question; I'm trying to grok how Digest authentication actually works with Squid, and this doesn't seem to me to quite add

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-11-01 Thread nairb rotsak
If there is anything else I can post, please let me know.. I never even knew this was an issue.. The one client I started with a couple of years ago loves it, but they never would have let me go forward if some people had to log in and other didn't (half the users are on a TS farm.. and they al

Re: [squid-users] SQUID + FIREFOX + ACTIVE DIRECTORY

2008-11-01 Thread Chris Nighswonger
On Sat, Nov 1, 2008 at 12:37 AM, Amos Jeffries <[EMAIL PROTECTED]> wrote: > Um, I'm not so sure the people having trouble are using the right helper. > > There is a thing calling itself 'ntlm_auth' bundled with squid 3.0 and > Squid-2 releases that is incapable of doing full NTLM for modern windows

Re: [squid-users] Ignoring query string from url

2008-11-01 Thread Henrik Nordstrom
On tor, 2008-10-30 at 19:50 +0530, nitesh naik wrote: > url rewrite helper script works fine for few requests ( 100 req/sec ) > but slows down response as number of requests increase and it takes > 10+ second to deliver the objects. I'v run setups like this at more than thousand requests/s. > Is

Re: [squid-users] Clients running amok - what can one do?

2008-11-01 Thread Henrik Nordstrom
On tor, 2008-10-30 at 09:25 +0100, Ralf Hildebrandt wrote: > Ever so often we have clients (browsers) that are somehow (?) caught > in a tight loop, resulting in a LOT of queries - one example > > 7996 10.39.108.198 > http://cdn.media.zylom.com/images/site/whitelabel/promo/deluxefeature/button_up

Re: [squid-users] Pushing HTTP-Response into the cache

2008-11-01 Thread Henrik Nordstrom
On lör, 2008-11-01 at 19:48 +0100, Willem Stender wrote: > So here is my question: How to push the data directly into squid's > cache? Is there any interfaces? Some port, so i can use sockets or > something like that? cache_peer, cache_peer_access, never_direct and a suitable HTTP request sent

Re: [squid-users] Squid 3.1

2008-11-01 Thread Henrik Nordstrom
On lör, 2008-11-01 at 14:05 +0200, İsmail ÖZATAY wrote: > > I'm suspecting it may be gcc-3.3 related. Is there a more recent gcc > > version you can upgrade to and try again? > > > > Amos > Opps i am already using gcc version 3.3.5 . ;) . I have just checked it... Is there any newer GCC version

Re: [squid-users] Questions on research into using digest auth against MS AD2003

2008-11-01 Thread Henrik Nordstrom
On fre, 2008-10-31 at 13:55 -0500, Richard wrote: > * What specific piece of the puzzle on the client side is it about the > NTLM or kerberos authentication methods that allow the authentication > traffic secure by sending only the credential hashes? The client talks to the microsoft SSP librari

Re: [squid-users] MSNT authentication - login window

2008-11-01 Thread Henrik Nordstrom
On fre, 2008-10-31 at 08:43 -0200, Luciano Cassemiro wrote: > Everything is OK but what bothers me is: the login window shows up when an > user > tries to connect to a forbidden site then he fill with his credentials BUT > after > OK button the login window appears again and again until the use

[squid-users] Pushing HTTP-Response into the cache

2008-11-01 Thread Willem Stender
Hi, i try to build an application, which can transport HTTP messages over DTN (www.dtnrg.org), you can call it a DTN proxy. The webbrowser requests the squid, and if the cache request misses, the HTTP request will be forwarded to the DTN proxy, which will get the response over DTN. If the res

Re: [squid-users] caching webdav traffic

2008-11-01 Thread Henrik Nordstrom
On tor, 2008-10-30 at 11:29 -0400, Seymen Ertas wrote: > I am trying to cache webdav traffic through a squid proxy, I have the > squid proxy configured in accel mode and have turned on the > "Cache-control: Public" on my server for the reason that every request > I send does contain a "Authorizati

Re: [squid-users] High Load

2008-11-01 Thread Luis Daniel Lucio Quiroz
Thanks all it was a uname -a problem, > Pablo García wrote: > > Luis, Please define "Heavy Load", how manu req/s, is this a forward, > > transparent or reverse proxy ? is this a memory only cache ? what are > > the vmstat outputs when it stops responding ? did run the ulimit -n > > 16384 be

Re: [squid-users] Squid 3.1

2008-11-01 Thread İsmail ÖZATAY
Amos Jeffries yazmış: İsmail ÖZATAY wrote: Amos Jeffries yazmış: İsmail ÖZATAY wrote: Amos Jeffries yazmış: İsmail ÖZATAY wrote: Hi there, I can not configure squid 3.1 beta on my openbsd 4.3 server. When try to configure a get lots of errors. Has anybody ever tried this ? Thanks ismail

Re: [squid-users] squid accelerator always requests peer to refresh

2008-11-01 Thread Amos Jeffries
Daniel Vollbrecht wrote: Are the dynamically generated pages given proper expiry information? (Expires: or Cache-Control: headers) the dynamically generated page answers with these headers (wget -S): Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache, must-revalidate Pragma:

Re: [squid-users] squid accelerator always requests peer to refresh

2008-11-01 Thread Daniel Vollbrecht
> Are the dynamically generated pages given proper expiry information? > (Expires: or Cache-Control: headers) the dynamically generated page answers with these headers (wget -S): Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache, must-revalidate Pragma: no-cache Should this no

Re: [squid-users] Squid 3.1

2008-11-01 Thread Amos Jeffries
İsmail ÖZATAY wrote: Amos Jeffries yazmış: İsmail ÖZATAY wrote: Amos Jeffries yazmış: İsmail ÖZATAY wrote: Hi there, I can not configure squid 3.1 beta on my openbsd 4.3 server. When try to configure a get lots of errors. Has anybody ever tried this ? Thanks ismail Some details about t

Re: [squid-users] squid accelerator always requests peer to refresh

2008-11-01 Thread Amos Jeffries
Daniel Vollbrecht wrote: I configured Squid (3.0 STABLE7) in web accelerator mode to speed up a slow dynamic website. Now all img and css files are completely served by squid. They don't show up on the slow machine 10.1.1.2. But the dynamic content itself always (page reload, other clients) l

[squid-users] squid accelerator always requests peer to refresh

2008-11-01 Thread Daniel Vollbrecht
I configured Squid (3.0 STABLE7) in web accelerator mode to speed up a slow dynamic website. Now all img and css files are completely served by squid. They don't show up on the slow machine 10.1.1.2. But the dynamic content itself always (page reload, other clients) leds to a request to the slo

Re: [squid-users] Performance

2008-11-01 Thread Kinkie
I'd also check "df -i", maybe you're running out of inodes in your cache dir On 11/1/08, Amos Jeffries <[EMAIL PROTECTED]> wrote: > Marcel Grandemange wrote: >> Good day users. >> >> >> I seem to have a performance issue where my squid server doesn't seem to >> exceed 400k on objects in cache, it

Re: [squid-users] Squid 3.1

2008-11-01 Thread Amos Jeffries
İsmail ÖZATAY wrote: Amos Jeffries yazmış: İsmail ÖZATAY wrote: Hi there, I can not configure squid 3.1 beta on my openbsd 4.3 server. When try to configure a get lots of errors. Has anybody ever tried this ? Thanks ismail Some details about the errors would be helpful. Others have manag

Re: [squid-users] Squid 3.1

2008-11-01 Thread İsmail ÖZATAY
Amos Jeffries yazmış: İsmail ÖZATAY wrote: Hi there, I can not configure squid 3.1 beta on my openbsd 4.3 server. When try to configure a get lots of errors. Has anybody ever tried this ? Thanks ismail Some details about the errors would be helpful. Others have managed to get it to work o