Re: [squid-users] RE: HTTPS and Squid

2010-05-07 Thread Jose Ildefonso Camargo Tolosa
Hi! On Fri, May 7, 2010 at 2:14 PM, Baird, Josh wrote: > Ok, perhaps I misunderstood how CONNECT works. > > When Squid CONNECT's to a remote webserver via HTTPS, the tunnel is > created between the user and the remote server.. so is all data sent > over HTTPS (from the remote server to the client

Re: [squid-users] weird problem with gmail, firefox and squid 2.7

2010-05-07 Thread Jeff Pang
2010/5/8 Diego : > > Hi List, > I am having a weird problem with gmail. > When I tried to load the gmail page using firefox 3.5.x and squid 2.7.7 the > login form of the page does not appear. > > If I use IE it works, regardless the squid version. > If I use Firefox 2.X it works, regardless the squ

Re: [squid-users] RE: HTTPS and Squid

2010-05-07 Thread Jeff Pang
2010/5/8 Baird, Josh : > Ok, perhaps I misunderstood how CONNECT works. > > When Squid CONNECT's to a remote webserver via HTTPS, the tunnel is > created between the user and the remote server.. Not thus. If so squid isn't a proxy. That's what the job STunnel(.org) will do. -- Tech support agent

[squid-users] Squid NTLM authentication against Windows 2008 R2 AD

2010-05-07 Thread Mike Diggins
My organization is about to upgrade our Windows 2000 AD to Windows 2008 R2. I use winbind in Samba 3.0.30 with Squid and NTLM to authenticate my users. Today I joined my test Squid server to the Windows 2008 R2 domain for testing. Joining the domain worked but authentication using the Samba t

[squid-users] Re: spaces with helpers

2010-05-07 Thread Luis Daniel Lucio Quiroz
Le vendredi 7 mai 2010 16:45:11, Luis Daniel Lucio Quiroz a écrit : > /usr/lib64/squid/squid_db_auth --dsn=DBI:mysql:joomla:localhost --user=root > -- table=jos15_users --usercol=username --passwdcol=password > --cond=block=0 -- plaintext --sql='select jos15_users.password from > jos15_users INNER

[squid-users] spaces with helpers

2010-05-07 Thread Luis Daniel Lucio Quiroz
/usr/lib64/squid/squid_db_auth --dsn=DBI:mysql:joomla:localhost --user=root -- table=jos15_users --usercol=username --passwdcol=password --cond=block=0 -- plaintext --sql='select jos15_users.password from jos15_users INNER JOIN jos15_acctexp_subscr ON jos15_users.id = jos15_acctexp_subscr.userid W

Re: [squid-users] Re: Joomla DB authentication support hits Squid! :)

2010-05-07 Thread Luis Daniel Lucio Quiroz
Le samedi 1 mai 2010 20:57:22, Amos Jeffries a écrit : > Luis Daniel Lucio Quiroz wrote: > > Le vendredi 23 avril 2010 00:20:13, Amos Jeffries a écrit : > >> Luis Daniel Lucio Quiroz wrote: > >>> Le jeudi 22 avril 2010 20:09:57, Amos Jeffries a écrit : > Luis Daniel Lucio Quiroz wrote: > >

Re: [squid-users] weird problem with gmail, firefox and squid 2.7

2010-05-07 Thread a...@gmail
Hi there, There are a lot of issues at the moment with FireFox 3.x.x It has issues in so many areas, especially with some java applets I would investigate that if I were you. I could well be a Firefox problem rather than a Squid issue. Try and use Firefox from somewhere else and see what happe

[squid-users] RE: HTTPS and Squid

2010-05-07 Thread Baird, Josh
Ok, perhaps I misunderstood how CONNECT works. When Squid CONNECT's to a remote webserver via HTTPS, the tunnel is created between the user and the remote server.. so is all data sent over HTTPS (from the remote server to the client using the squid proxy)? Thanks, Josh -Original Message--

Re: [squid-users] Compile errors on Ubuntu 10.4

2010-05-07 Thread Chris Horry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/05/10 11:21, Kinkie wrote: > On Fri, May 7, 2010 at 5:10 PM, Chris Horry wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> I suspect I'm doing something wrong as I'm new to Ubuntu, 3.1.3 works >> fine on my Slackware box :) > > Y

[squid-users] HTTPS and Squid

2010-05-07 Thread Baird, Josh
Typically, all of our proxy clients connect to our Squid servers via HTTP (TCP/80). If they request a HTTPS site, Squid will CONNECT to the site and tunnel the data back to the client via HTTP. I have a scenario now where the entire stream needs to be HTTPS: (HTTPS)-(HTTPS) How

[squid-users] weird problem with gmail, firefox and squid 2.7

2010-05-07 Thread Diego
Hi List, I am having a weird problem with gmail. When I tried to load the gmail page using firefox 3.5.x and squid 2.7.7 the login form of the page does not appear. If I use IE it works, regardless the squid version. If I use Firefox 2.X it works, regardless the squid version. If I use firefox 3.

Re: [squid-users] Compile errors on Ubuntu 10.4

2010-05-07 Thread Kinkie
On Fri, May 7, 2010 at 5:10 PM, Chris Horry wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I suspect I'm doing something wrong as I'm new to Ubuntu, 3.1.3 works > fine on my Slackware box :) Your Ubuntu box is probably missing some openssl-related header files. Please check that you

[squid-users] Compile errors on Ubuntu 10.4

2010-05-07 Thread Chris Horry
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I suspect I'm doing something wrong as I'm new to Ubuntu, 3.1.3 works fine on my Slackware box :) Thanks! If it's relevant... OpenSSL 0.9.8k 25 Mar 2009 g++ (Ubuntu 4.4.3-4ubuntu5) 4.4.3 Configure options: /configure --enable-ssl --enable-linux-ne

Re: [squid-users] Re: squid_ldap_auth

2010-05-07 Thread Nick Cairncross
What about kerberos auth and use the the squid_kerb_ldap lookup? cheers On 07/05/2010 13:45, "burbankmarc" wrote: So I guess the only way to get it to work like NTLM is to use NTLM? Well, I'm not sure what we're going to do when we can't use it any longer, but that will work for now. Than

RE: [squid-users] Increasing File Descriptors - Fixed!!

2010-05-07 Thread Bradley, Stephen W. Mr.
Got it resolved! cat /proc/sys/fs/file-max showed that I could go as high as 3,138,830 FDs. I changed the compile options to --with-maxfd=128000 and recompiled and installed it. I changed the line in my /etc/init.d/squid script to ulimit -HSn 128000 and restarted. I thought I had tried all th

[squid-users] Re: squid_ldap_auth

2010-05-07 Thread burbankmarc
So I guess the only way to get it to work like NTLM is to use NTLM? Well, I'm not sure what we're going to do when we can't use it any longer, but that will work for now. Thanks all, David -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-ldap-auth-tp212

RE: [squid-users] Increasing File Descriptors

2010-05-07 Thread Bradley, Stephen W. Mr.
Hassan is correct. We currently pulled all three of our production servers offline because the last we can afford is to run out of FDs which causes serious issues to the users. We run an actual Squid count of around 1500 users on all three but some of those are NATed addresses of around 100 or

[squid-users] FW: TCP/MISS 500

2010-05-07 Thread Daniel Hartmann | Betterhomes AG
I start receiving the TCP_MISS/500: 1273224302.686 83 xxx.xxx.xxx.xxx TCP_MISS/500 539 GET http://domain.com/url - FIRST_UP_PARENT/kallisto text/html How can I prevent this error? The cache_peer is working quite well. If I request the site without using squid I don't receive any errors. my s

Re: [squid-users] Squid bandwidth

2010-05-07 Thread Peter Vereshagin
Wake me up when September ends, Jeff! 2010/05/04 21:49:58 +0800 Jeff Pang => To badaim2 : JP> > Any real time example squid code is there for my bandwidth configuration? JP> From what I know you can't do that with current features of Squid. JP> You may need some customized code to Squid, this is