Re: [squid-users] facebook and excess data

2009-10-02 Thread Amos Jeffries
Agung T. Apriyanto wrote: recently i got a lot of this in squid log, i'm using 2.7.STABLE6 2009/10/02 22:00:42| httpReadReply: Excess data from "GET http://www.facebook.com/home.php?"; 2009/10/02 22:01:00| httpReadReply: Excess data from "GET http://www.facebook.com/home.php?"; 2009/10/02 22:0

Re: [squid-users] 3.1.0.14 tproxy slow preformance

2009-10-02 Thread Amos Jeffries
Dan wrote: Hello, I have compile squid 3.1.0.14 under both Ubuntu 9.04 and Fedora 11. Both complete successfully and work fine until I enable tproxy then the requests performance drops. here is a httperf of squid without tproxy httperf --client=0/1 --server=localhost --port=3128 --uri=/ -

Re: [squid-users] squid_kerb_auth Backup-Auth server?

2009-10-02 Thread andrew
Mrvka Andreas wrote: Hi list, does anybody know if there is any change to define a backup kerberos authentication server? Do I have to set anything in krb5.conf to support more than one AD server? If I want to reboot the kerberos server squid should still be able to authenticate. Are ther

[squid-users] Re: squid_kerb_auth Backup-Auth server?

2009-10-02 Thread Markus Moeller
You can list as many as you like. You can also use DNS srv records which AD usually defines automatically ( if you run DNS on it too) Also squid does not require any kdc. The client does all the communication to AD (That is why Kerberos should perform better then NTLM) Regards Markus "Mrvka

[squid-users] problems

2009-10-02 Thread Al - Image Hosting Services
Hi, I seem to have created a lot of problems for myself. We are using squid with custom written software to filter web content. Because the server is in one location and my users are in other locations and because of the large number of hours spent helping people setup their computers to use

[squid-users] 3.1.0.14 tproxy slow preformance

2009-10-02 Thread Dan
Hello, I have compile squid 3.1.0.14 under both Ubuntu 9.04 and Fedora 11. Both complete successfully and work fine until I enable tproxy then the requests performance drops. here is a httperf of squid without tproxy httperf --client=0/1 --server=localhost --port=3128 --uri=/ --send-buffer

Re: [squid-users] secured authentication

2009-10-02 Thread Luis Daniel Lucio Quiroz
Le vendredi 2 octobre 2009 10:46:44, donovan jeffrey j a écrit : > On Sep 30, 2009, at 1:10 AM, Amos Jeffries wrote: > > For proxy-browser authentication: > > > > The preferred option is Kerberos / Negotiate authentication. I'm > > not sure of the Safari support level. IE needs to be version 7 or

Re: [squid-users] secured authentication

2009-10-02 Thread donovan jeffrey j
On Sep 30, 2009, at 1:10 AM, Amos Jeffries wrote: For proxy-browser authentication: The preferred option is Kerberos / Negotiate authentication. I'm not sure of the Safari support level. IE needs to be version 7 or newer. Second best is NTLM. They should all support that. Squid has som

[squid-users] facebook and excess data

2009-10-02 Thread Agung T. Apriyanto
recently i got a lot of this in squid log, i'm using 2.7.STABLE6 2009/10/02 22:00:42| httpReadReply: Excess data from "GET http://www.facebook.com/home.php?"; 2009/10/02 22:01:00| httpReadReply: Excess data from "GET http://www.facebook.com/home.php?"; 2009/10/02 22:03:48| httpReadReply: Excess

RE: [squid-users] Squid-2.7.Stable 7 & Sharepoint

2009-10-02 Thread Lee Bailey
Hello, That's fine thank you, I just needed to know if you got a challenge or not. Thanks, Lee. From: Odhiambo Washington [mailto:odhia...@gmail.com] Sent: 02 October 2009 14:54 To: Lee Bailey Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Sq

RE: [squid-users] Squid-2.7.Stable 7 & Sharepoint

2009-10-02 Thread Lee Bailey
Hi, They are both set at the default... Has anyone tried clicking the link in my original post? Thanks, Lee. -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: 02 October 2009 10:43 To: Lee Bailey Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Squid-

[squid-users] squid_kerb_auth Backup-Auth server?

2009-10-02 Thread Mrvka Andreas
Hi list, does anybody know if there is any change to define a backup kerberos authentication server? Do I have to set anything in krb5.conf to support more than one AD server? If I want to reboot the kerberos server squid should still be able to authenticate. Are there any hints? Regards And

Re: [squid-users] External Script for checks

2009-10-02 Thread Stefan Dengscherz
Hello Michel, i'm using 'external_acl_type' with a homebrew script to lookup remote user ids via the windows registry at the moment because NTLM and Kerberos did not work well in my environment. This should do the job for your problem, too - the external helper script would check if your remote

Re: [squid-users] Squid-2.7.Stable 7 & Sharepoint

2009-10-02 Thread Amos Jeffries
Lee Bailey wrote: Hello, I'm trying to access a sharepoint site (http://portal.shu.ac.uk/sites/DandS/teachFirst) which I believe is based at Sheffield Hallam University. We are using Squid 2.7 Stable 7 to proxy our internet connections. If I directly connect to this site I get challenged with a

[squid-users] Squid-2.7.Stable 7 & Sharepoint

2009-10-02 Thread Lee Bailey
Hello, I'm trying to access a sharepoint site (http://portal.shu.ac.uk/sites/DandS/teachFirst) which I believe is based at Sheffield Hallam University. We are using Squid 2.7 Stable 7 to proxy our internet connections. If I directly connect to this site I get challenged with a userid/password dia

[squid-users] External Script for checks

2009-10-02 Thread michel
Hello Using freeradius to connect my remote users via Dialin, each time they connect my users, is assigned a random ip. My question: Would like to make a script for my squid server then checks against mysql search if the user is connected, compare against a file if the user exists in t

Re: [squid-users] Squid 3.1: ICAP and Round Robin for ICAP Services

2009-10-02 Thread Amos Jeffries
Silamael wrote: Silamael wrote: Hello together, Is there any possiblity to realize a round robin scheduling for requests sent to ICAP services? Goal is to forward each HTTP request to the next available ICAP service due to load balancing issues. As far as i read the configuration manual, there