Re: [squid-users] Re: Re: squid_kerb_ldap - Error while initialising credentials from keytab

2010-07-02 Thread Tom Tux
Hi Markus Is it necessary to renew periodically the kerberos-ticket? I've defined a a ticket_lifetime for 24h. I've now the following output: proxy-test-01:~ # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: u...@xx.yy Valid starting ExpiresService principal 07/01/10

[squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Zeller, Jan (ID)
Dear list, unfortunately I am unable to compile squid-3.1.5 on Debian lenny 5.0.5 $ uname -srvmpio Linux 2.6.26-2-amd64 #1 SMP Sun Jun 20 20:16:30 UTC 2010 x86_64 unknown unknown GNU/Linux $ ./configure --prefix=/opt/squid-3.1.5 --enable-icap-client --enable-ssl --disable-translation

Re: [squid-users] Destination domain and regular expression

2010-07-02 Thread Alberto Cappadonia
Il 02/07/10 01.40, Amos Jeffries ha scritto: Alberto Cappadonia wrote: Hi all, If I want to deny the access, for example, to google and I want that every google web site (in any language) cannot be accessed, can I write an acl like the following? -- acl googleDomains dstdom_regex -i

Re: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Sean Austin C. Critica
On Fri, Jul 2, 2010 at 3:44 PM, Zeller, Jan (ID) jan.zel...@id.unibe.ch wrote: Dear list, unfortunately I am unable to compile squid-3.1.5 on Debian lenny 5.0.5 $ uname -srvmpio Linux 2.6.26-2-amd64 #1 SMP Sun Jun 20 20:16:30 UTC 2010 x86_64 unknown unknown GNU/Linux $ ./configure

[squid-users] Bug 2973 - Memory leak when handling pathless http requests

2010-07-02 Thread Richard Wall
I just filed a new bug and wondered if anyone here had seen a similar problem or had any suggestions about how to track down the possible memory leak. * http://bugs.squid-cache.org/show_bug.cgi?id=2973 There seems to be quite a bad memory leak in the way Squid handles HTTP requests which do not

[squid-users] Re: Re: Re: squid_kerb_ldap - Error while initialising credentials from keytab

2010-07-02 Thread Markus Moeller
Hi Tom, The important ticket is the one on the client (I assume a XP PC). Windows will usually renew the ticket automatically every 10 hours for 7 days. The proxy will request new tickets for the ldap authentication, but uses a memory cache which you can not access. Regards Markus Tom

RE: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Zeller, Jan (ID)
Try setting CPPFLAGS before running configure. Doing this lets you use the libtool version included with the source. I think the build scripts were supposed to take care of this but they don't. $ declare -x CPPFLAGS=-I../libltdl $ ./configure (your configure options) $ make -- Sean

Re: [squid-users] Re: Re: Re: squid_kerb_ldap - Error while initialising credentials from keytab

2010-07-02 Thread Tom Tux
Hi Markus Thank you. But what's the meaning of the kerberos-ticket cached on the squid (which I can not renew because of kinit(v5): Ticket expired while renewing credentials)? Do I have to renew it with a kinit [username]? As much I understand, I have not to renew itcorrect? I had destroy

Re: [squid-users] Destination domain and regular expression

2010-07-02 Thread Amos Jeffries
Alberto Cappadonia wrote: Il 02/07/10 01.40, Amos Jeffries ha scritto: Alberto Cappadonia wrote: Hi all, If I want to deny the access, for example, to google and I want that every google web site (in any language) cannot be accessed, can I write an acl like the following? -- acl

Re: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Amos Jeffries
Zeller, Jan (ID) wrote: Dear list, unfortunately I am unable to compile squid-3.1.5 on Debian lenny 5.0.5 snip depbase=`echo LoadableModule.o | sed 's|[^/]*$|.deps/|;s|\.o$||'`;\ g++ -DHAVE_CONFIG_H -DDEFAULT_CONFIG_FILE=\/opt/squid-3.1.5/etc/squid.conf\

Re: [squid-users] Bug 2973 - Memory leak when handling pathless http requests

2010-07-02 Thread Amos Jeffries
Richard Wall wrote: I just filed a new bug and wondered if anyone here had seen a similar problem or had any suggestions about how to track down the possible memory leak. * http://bugs.squid-cache.org/show_bug.cgi?id=2973 There seems to be quite a bad memory leak in the way Squid handles HTTP

RE: [squid-users] unable to compile squid-3.1.5 on debian lenny

2010-07-02 Thread Zeller, Jan (ID)
Sorry about this. It's not you. Our packaging machine has undergone an OS upgrade since the last releases. Squid now auto-bundles libltdl 2.2.6b which unfortunately depends on some system headers without detecting their absence cleanly on systems bundling older LTDL. LTDL is only needed

[squid-users] ACL blocks, browser retries constantly

2010-07-02 Thread David Parks
I have a simple ACL helper that fails whenever a user should no longer have access (I need a way of dynamically blocking access to the proxy on a per-user basis). But when the ACL fails the request, the browser goes into a vicious cycle of continuing to re-try the same request indefinitely and

[squid-users] Re: Re: Re: Re: squid_kerb_ldap - Error while initialising credentials from keytab

2010-07-02 Thread Markus Moeller
Tom Tux tomtu...@gmail.com wrote in message news:aanlktikvpjwroa_sgbyvzpn2vyisybc3961jurlf9...@mail.gmail.com... Hi Markus Thank you. But what's the meaning of the kerberos-ticket cached on the squid (which I can not renew because of kinit(v5): Ticket expired while renewing credentials)?