[squid-users] Squid only sends If-None-Match to origin server if the client sends it?

2010-11-17 Thread Riccardo Pizzi
Hi, I am using Squid 2.6.STABLE21 in accelerator mode and trying to cache dynamic content. My origin server appends an ETag header that is a MD5 of the actual page, and when a client sends the if-none-match with matching ETag, a 304 is returned instead of the page unless the page changed in

Re: [squid-users] Squid only sends If-None-Match to origin server if the client sends it?

2010-11-17 Thread Amos Jeffries
On 18/11/10 00:18, Riccardo Pizzi wrote: Hi, I am using Squid 2.6.STABLE21 in accelerator mode and trying to cache dynamic content. My origin server appends an ETag header that is a MD5 of the actual page, and when a client sends the if-none-match with matching ETag, a 304 is returned instead

[squid-users] cache_peer - config

2010-11-17 Thread viswanathan
Hi I am using squid2.7 stable7 with 5 cache_peer in round robin.The cache_peer are configured as parent and never_direct allow all option is used. The cache_peer servers are non squid caching devices and are of more like content filter In access.log i can see TCP_MISS/000 error appears

[squid-users] Question RE handling of FTP errors

2010-11-17 Thread Jakob Curdes
Hi, I am trying to work out squid's (3.0stable20) behavior when used for (non-anonymous) FTP downloads. I use an own test ftp site for this, so I can see the FTP logs. When I download an existing file, all is as expected. When I try to download a non-existing file, squid obviously tries to

[squid-users] LDAP authentication

2010-11-17 Thread Riccardo Castellani
I'm using Squid 2.7 Stable3 in my network where some clients are in workgroup while others in MS domain. I'm testing LDAP Authentication by Active Directory and It likes that it works! I'd like allowing web surfing sequentially according to these rules: rule 1:by only IP ADDRESS rule 2:

Re: [squid-users] LDAP authentication

2010-11-17 Thread Chad Naugle
Is the IP Address even stored in Active Directory for a signed-in user? - Chad E. Naugle Tech Support II, x. 7981 Travel Impressions, Ltd. Riccardo Castellani ric.castell...@alice.it 11/17/2010 1:46 PM I'm using Squid 2.7 Stable3 in my network

Re: [squid-users] High cpu load with squid

2010-11-17 Thread Michał Prokopiuk
Dnia Poniedziałek, 01.11.2010 o 2:17 Amos Jeffries napisał: On Sun, 31 Oct 2010 20:45:33 +0100, Michał Prokopiuk mic...@linuxstuff.pl wrote: Hi. For the last few days I have had troubles with my squid (3.0.24) - it gets a lot of cpu, and response time is very long, about 4000 ms. I

Re: [squid-users] LDAP authentication

2010-11-17 Thread Riccardo Castellani
I have to verify, tomorrow morning I'm able to do it. - Original Message - From: Chad Naugle chad.nau...@travimp.com To: Riccardo Castellani ric.castell...@alice.it; squid-users@squid-cache.org Sent: Wednesday, November 17, 2010 7:53 PM Subject: Re: [squid-users] LDAP authentication

[squid-users] Ldap + active directory: bizarre authentication

2010-11-17 Thread Riccardo Castellani
I tested Squid authentication by ActiveDirectory LDAP. I tried to navigate in these 2 cases: A) from clients which are in workgroup: if I type credentials of a domain user, surfing works fine. B) from clients which are into domain: if I type credentials of my domain user (current logged

Re: [squid-users] LDAP authentication

2010-11-17 Thread Riccardo Castellani
However until today I configured squid.conf inserting an acl (acl xxx src a.b.c.d) for every pc (that have to navigate) so I know what computers can surfing into Internet. Now I have started to work with MS domain I want to update slow my system - Original Message - From: Chad

Re: [squid-users] Ldap + active directory: bizarre authentication

2010-11-17 Thread Chad Naugle
It really isn't bizzare, because that is how it is designed to work. It uses the credentials you provide to authenticate the user, and logs it that way. - Chad E. Naugle Tech Support II, x. 7981 Travel Impressions, Ltd. Riccardo Castellani

[squid-users] Issue with always_direct and local hosts

2010-11-17 Thread Chris Gallacher
Hello, I am experiencing issues when trying to configure Squid to bypass my companies parent proxy for local hosts. My configuration is as follows: (User Facing Proxy - Squid) - (Parent Proxy - Squid) - (Parent Proxy - Websense) Both of the Squid proxies are running squid-2.7.STABLE8 on Windows

[squid-users] Failover to upstream when direct link down

2010-11-17 Thread Paul
We currently have a direct connection to the internet and a connection to an upstream proxy via a separate connection. The majority of our users connect to a downstream proxy which connects to our squid 2.7 on openSUSE 11.3 which then forwards these requests to the upstream proxy. The rest of our

Re: [squid-users] Ldap + active directory: bizarreauthentication

2010-11-17 Thread Riccardo Castellani
B) from clients which are into domain: if I type credentials of my domain user (current logged domain user) Squid requests again me credentials ! While I type credentials of another domain user (different from my current domain user) surfing works ! Read point B : - Original

Re: [squid-users] Question RE handling of FTP errors

2010-11-17 Thread Amos Jeffries
On Wed, 17 Nov 2010 18:03:45 +0100, Jakob Curdes j...@info-systems.de wrote: Hi, I am trying to work out squid's (3.0stable20) behavior when used for (non-anonymous) FTP downloads. I use an own test ftp site for this, so I can see the FTP logs. When I download an existing file, all is

Re: [squid-users] Question RE handling of FTP errors

2010-11-17 Thread Jakob Curdes
There are bigger problems in 3.0. In short FTP in 3.0 and older require the username AND password to be publicly visible in the URL. Please try with 3.1 or 3.2. I noticed that with wget I could only retrieve files when putting username/pwd in the URL. But even then I got an empty return page

Re: [squid-users] Failover to upstream when direct link down

2010-11-17 Thread Amos Jeffries
On Wed, 17 Nov 2010 20:40:34 +, Paul n...@pointdee.co.uk wrote: We currently have a direct connection to the internet and a connection to an upstream proxy via a separate connection. The majority of our users connect to a downstream proxy which connects to our squid 2.7 on openSUSE 11.3

[squid-users] authentication switching

2010-11-17 Thread Mikio Kishi
Hi, all Now, I'm using NTLM authentication (auth_param ntlm ..). However, we can not browse some sites (windows update or adobe's one) bacause activex control is not supported NTLM authentication. So, I'd like to browse via Basic auth when NTLM auth is failed. Is it possible to configure

[squid-users] R: [squid-users] LDAP authentication

2010-11-17 Thread Riccardo Castellani
NO, IP Address is not stored into AD for a signed-in user. I keep 'acl src' into squid.conf for every IP which needs to go to Internet and I allow it permission by 'http_access' directive; by this list I'm able to know what computers can surfing. -Messaggio originale- Da: Chad Naugle