Re: [squid-users] how to cache youtube

2010-04-08 Thread Kinkie
On Fri, Apr 9, 2010 at 12:32 AM, sameer khan wrote: >> Please see http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube > thanks kinkie, > > but does it work ? any one experience with below link ? will be much > appreciated > for any help. To the best of my knowledge, it does. The

RE: [squid-users] Re: Creating a kerberos Service Principal.

2010-04-08 Thread GIGO .
Markus could not get you please can you elaborate a bit. thank you all! regards, Bilal > To: squid-users@squid-cache.org > From: hua...@moeller.plus.com > Date: Thu, 8 Apr 2010 20:04:30 +0100 > Subject: [squid-users] Re: Creating a kerberos Service

RE: [squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
Hi Markus/Nick, I have chosen the following method of creating the keytab can you give me your advice/expereince regarding it. 1. I have created a user account for SPN in Active directory with password never expires and preauthentication not required checked. squidLhr-proxy Pwd: X C:\P

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Amos Jeffries
Henrik Nordström wrote: tor 2010-04-08 klockan 20:43 +1200 skrev Amos Jeffries: FWIW, the flash player and the server are somewhat broken and playing bad games with HTTP/1.1 Range requests. Which quite likely triggers confusion within Squid as the store/object interface is range aware. Has be

Re: [squid-users] Squid is unable to connect to local webservers

2010-04-08 Thread Amos Jeffries
Johnson, S wrote: Another piece of information I just discovered... I use a wpad.dat file to assign the proxy to users. It works just fine except for the local servers. However, when I force the connection in the browser to the proxy with 8080 (dansguardian) then I can get to my local web se

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Mark Nottingham
The response to the request with the fs query arg is sending back a Content-Range header; http://redbot.org/?uri=http%3A%2F%2Fserver437.files.youporn.com%2Fe4%2Fflv%2F426677_Splash.flv%3Fe%3D1273284436%26h%3D47ee1fbcb8d3ab05a06988683c2d94c1%26fs%3D4281434 That's weird. On 08/04/2010, at 1:

RE: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread David Robinson
> Which quite likely triggers confusion within Squid as the store/object > interface is range aware. Has been issues there in the past, and quite > likely is more issues.. Is squid 2.7 Content-Range aware? Since these requests work in 2.7, is 2.7 just ignoring the range requests? -Original M

RE: [squid-users] how to cache youtube

2010-04-08 Thread sameer khan
thanks kinkie, but does it work ? any one experience with below link ? will be much appreciated for any help. thanks > Date: Thu, 8 Apr 2010 11:48:35 +0200 > Subject: Re: [squid-users] how to cache youtube > From: gkin...@gmail.com > To: khanza...@hotmail.com > CC: squid-users@squid-cache

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Henrik Nordström
tor 2010-04-08 klockan 20:43 +1200 skrev Amos Jeffries: > FWIW, the flash player and the server are somewhat broken and playing > bad games with HTTP/1.1 Range requests. Which quite likely triggers confusion within Squid as the store/object interface is range aware. Has been issues there in the

RE: [squid-users] url_regex file format

2010-04-08 Thread Henrik Nordström
tor 2010-04-08 klockan 14:59 -0700 skrev Mellem, Dan: > >Also, what RE are supported? > > The same as egrep / grep -E. Which is also known as POSIX Extended Regex. Regards Henrik

RE: [squid-users] url_regex file format

2010-04-08 Thread Mellem, Dan
>-Original Message- >From: Jean-Luc Wasmer [mailto:sq...@2010.jl.wasmer.ca] >Sent: Thursday, April 08, 2010 1:02 PM > >Hi, > >What is the format of the regex file when defining an ACL >based on regexes? Just a list of matches. E.g.: ^http://www\.google\.com #Allow access to Google # Ne

Re: [squid-users] Authentication logging

2010-04-08 Thread John Horne
On Thu, 2010-04-08 at 21:43 +0100, John Horne wrote: > Hello, > > Using squid 2.7 stable 9, I have set the debug_options to 29,2 which > logs authenticated users, e.g: > >user 'xxx' has been seen at a new IP address (11.22.33.44) > > However, is there a way I can log unsuccessful authenticat

[squid-users] Authentication logging

2010-04-08 Thread John Horne
Hello, Using squid 2.7 stable 9, I have set the debug_options to 29,2 which logs authenticated users, e.g: user 'xxx' has been seen at a new IP address (11.22.33.44) However, is there a way I can log unsuccessful authentication attempts? I have increased the debug level to 6, but it still doe

[squid-users] url_regex file format

2010-04-08 Thread Jean-Luc Wasmer
Hi, What is the format of the regex file when defining an ACL based on regexes? Can I have comments in there? What is the "-i" option for? Also, what RE are supported? Thanks, Jean-Luc

[squid-users] Re: Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread Markus Moeller
Hi Nick, Did you use samba to create the keytab. I have seen that if you use samba for more then squid (e.g. cifs, winbind, etc) it will update regularly the AD entry and key for the host/fqdn principal which is the same as for HTTP/fqdn. I usually use msktutil and create a second AD entry ca

[squid-users] Re: Creating a kerberos Service Principal.

2010-04-08 Thread Markus Moeller
BTW You do not need Administrator rights. You can set permission for different Groups on OUs for example for Unix Kerberos Admins. Markus "Khaled Blah" wrote in message news:n2j4a3250ab1004080957id2f4a051xb31445428c62b...@mail.gmail.com... Hi Bilal, 1. ktpass and msktutil practically do the

[squid-users] Squid 2.7.8 + pfSense 'zero sized reply'

2010-04-08 Thread Luke Jaeger
I'm running Squid 2.7.8 on pfSense 1.2.2. As of today, we get the 'zero sized reply' error when trying to load www.questgarden.com. It worked yesterday! (I rebooted the firewall this morning during an ISP outage - presumably that's when it broke). I can load the page thru curl, but not in a brow

Re: [squid-users] Creating a kerberos Service Principal.

2010-04-08 Thread Khaled Blah
I forgot this link to an Example configuration: http://wiki.squid-cache.org/ConfigExamples/Authenticate/Kerberos 2010/4/8 Khaled Blah : > Hi Bilal, > > 1. ktpass and msktutil practically do the same, they create keytabs > which include the keys that squid will need to decrypt the ticket it > recei

Re: [squid-users] Creating a kerberos Service Principal.

2010-04-08 Thread Khaled Blah
Hi Bilal, 1. ktpass and msktutil practically do the same, they create keytabs which include the keys that squid will need to decrypt the ticket it receives from the user. However ktpass only creates a file which you will then have to securely transfer to your proxy server so that squid can access

Re: [squid-users] [Urgent] Please help : NAT + squid2.7 on ubuntu server 9.10 + cisco firewall (ASA5510)

2010-04-08 Thread Vichao Saenghiranwathana
I still stunned. Can you explain more in deeper detail so I can understand what the problem is. I'm really appreciate it Vichao S On Thu, Apr 8, 2010 at 2:03 PM, Amos Jeffries wrote: > > Vichao Saenghiranwathana wrote: >> >> What I have done so far are >> 1. Connected squid transparent proxy ser

RE: [squid-users] Squid is unable to connect to local webservers

2010-04-08 Thread Johnson, S
Another piece of information I just discovered... I use a wpad.dat file to assign the proxy to users. It works just fine except for the local servers. However, when I force the connection in the browser to the proxy with 8080 (dansguardian) then I can get to my local web servers. -Origina

[squid-users] Squid is unable to connect to local webservers

2010-04-08 Thread Johnson, S
I've got a squid proxy running in transparent mode with an AUP on a "public" wireless network which is separated from our private network.  We run a local webserver here and found that users get the AUP and cannot click past it when attempting to get to the local web server. Without using the p

[squid-users] Address Network Report Sarg

2010-04-08 Thread Rafael Poch || DB1 Informática
Hi, Recently in my sarg report appeared an address 10.1.1.0 together my user list. 10.1.1.0 is my network address. I don’t understand why this entry appear. Anybody know how to solve this issue ? Att. Rafael Poch Vieira Palma INFRA-ESTRUTURA - T.I (44)3033-6300 - Ramal 6323 / Fax (44)3033-

Re: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-08 Thread donovan jeffrey j
On Apr 8, 2010, at 9:12 AM, Dean Weimer wrote: > -Original Message- > From: donovan jeffrey j [mailto:dono...@beth.k12.pa.us] > Sent: Thursday, April 08, 2010 7:37 AM > To: Amos Jeffries > Cc: squid-users@squid-cache.org > Subject: Re: [squid-users] UDP errors after upgrade to 3.1.1 > >

RE: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-08 Thread Dean Weimer
-Original Message- From: donovan jeffrey j [mailto:dono...@beth.k12.pa.us] Sent: Thursday, April 08, 2010 7:37 AM To: Amos Jeffries Cc: squid-users@squid-cache.org Subject: Re: [squid-users] UDP errors after upgrade to 3.1.1 >no pid file in the 3.1.1 build. >I check my other copies an

Re: [squid-users] UDP errors after upgrade to 3.1.1

2010-04-08 Thread donovan jeffrey j
> >> >> Second and probably more important. >> squid -d1x >> squid -k check shows " squid: ERROR: No running copy " >> squid -k rotate " squid: ERROR: No running copy " >> squid -k shutdown " squid: ERROR: No running copy " >> >> ps -ax | grep squid >> root# ps -ax | grep squid >> 29428 ??

RE: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread GIGO .
Nick, Thank you so much for your support. I am now much confident about Negotiate/Kerberos and have just decided to jump into the real thing (as enough theory). As far as KVNo i have not experienced it yet(as not practically implemented) however i may too in due course and surely will share w

Re: [squid-users] how to cache youtube

2010-04-08 Thread Kinkie
On Thu, Apr 8, 2010 at 11:46 AM, sameer khan wrote: > > hey all great; > > does any one have successfully cached youtube. any pointer will be much > appreciated. Please see http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube -- /kinkie

[squid-users] how to cache youtube

2010-04-08 Thread sameer khan
hey all great; does any one have successfully cached youtube. any pointer will be much appreciated. Thanks _ http://clk.atdmt.com/UKM/go/195013117/direct/01/ We want to hear all your funn

Re: [squid-users] Re: Re: SSO with Active Directory-Squid Clients

2010-04-08 Thread Nick Cairncross
Bilal, I'm working on much the same thing, with added Apple Mac just to complicate things. My aim is to create an SSO environment for all my Windows, OSX and nix machines. I want to use Kerberos as my primary authentication as IE7 and FF onwards are moving that way..but for my situation some br

[squid-users] Squid ACL per-user basis

2010-04-08 Thread CASALI COMPUTERS - Michele Brodoloni
Hello, i'm using squid 2.6 Version 2.6.STABLE21 (provided with CentOS 5.x), using NTLM AUTH. Since I'm able to apply ACLs to Windows Groups, I'm just wondering if I can apply an ACL only to a single user. Should I need to create a group only for that user and apply an acl to that group or there'

Re: [squid-users] Squid 3.1.1 and flash video scrubbing

2010-04-08 Thread Amos Jeffries
David Robinson wrote: My range_offset_limit and quick_abort_* setting were all default. I tried setting range_offset_limit -1 - did not fix the problem quick_abort_min 0 and quick_abort_max 0 - did not fix the problem quick_abort_min -1 - did not fix the problem The type of urls its hav

Re: [squid-users] [Urgent] Please help : NAT + squid2.7 on ubuntu server 9.10 + cisco firewall (ASA5510)

2010-04-08 Thread Amos Jeffries
Vichao Saenghiranwathana wrote: What I have done so far are 1. Connected squid transparent proxy server with ASA5510 via eth0 interface 2. Set up NAT at ASA5510 to map squid transparent proxy server(192.168.9.251) with the public ip (203.130.133.9) There should be no need for NAT on the ASA.