[squid-users] Timeout loading a single website

2011-11-04 Thread Mark Rutherford
Hello all, I am running Squid on a Debian Lenny machine (squid/3.0.STABLE8) and my users cannot load this one web site. It is configured as an interception proxy. The site in question is www.humana.com. To my knowledge, there are no other websites that exhibit a problem and my lack of

[squid-users] Squid - digest LDAP authentication nounce invalidation

2011-11-04 Thread Joshi Pradyumna
Hi all, We are using digest_ldap_auth with Open LDAP for squid digest authentication. It is working well but there is an issue. When the user-password is changed on the LDAP server, squid should invalidate existing nounce after the specified nounce_garbage_interval and should generate a new

[squid-users] Proxy-Authorization headers

2011-11-04 Thread Markus Nilsson
Hi! I'm having some trouble with kerberos (negotiate) authentication and the Proxy-Authorization header. Currently I am using digest, and it's working fine. I allow most request in squid, but am using a url_rewriter to check if the user really has permission to access a specific site.

[squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Rick Chisholm
I've read about this problem, just wondering if there were any fixes. We have a squid reverse proxy in from of OWA Exchange 2010. When a client connects through the proxy to the full/enriched OWA version there is about a 5 minute pause before everything starts working. After than, everything

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Eliezer Croitoru
On 04/11/2011 16:55, Rick Chisholm wrote: clear your cache, then you get the pause again. The light versions of OWA did you tried the 3.2 branch? as let say 3.2.0.8? Eliezer

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Rick Chisholm
3.2 does not appear to be available in the BSD ports tree at this time. On Fri, November 4, 2011 11:39 am, Eliezer Croitoru wrote: On 04/11/2011 16:55, Rick Chisholm wrote: clear your cache, then you get the pause again. The light versions of OWA did you tried the 3.2 branch? as let say

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Eliezer Croitoru
On 04/11/2011 17:41, Rick Chisholm wrote: 3.2 does not appear to be available in the BSD ports tree at this time. compile it yourself.. it pretty simple.. Eliezer On Fri, November 4, 2011 11:39 am, Eliezer Croitoru wrote: On 04/11/2011 16:55, Rick Chisholm wrote: clear your cache, then

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Rick Chisholm
I'm not intimidated by that option, but I prefer to use ports (which is still compiling from source FWIW) to make update management easier. Also this is a mission critical production box and I can't just blindly throw new versions at it without finding out what the issue is and why a certain

[squid-users] Squid 3.1.15 not enforcing browser proxy mode

2011-11-04 Thread Ron Starr
To all, Maybe someone wiser than me can point out the error in our configuration. Have googled for hours and searched the archives. We have two configs we are testing. In both configs a requirement is that the user be forced to use the Squid proxy by enabling proxy mode in the browser (ie,

Re: [squid-users] Squid 3.1.15 not enforcing browser proxy mode

2011-11-04 Thread Amos Jeffries
On 5/11/2011 11:04 a.m., Ron Starr wrote: To all, Maybe someone wiser than me can point out the error in our configuration. Have googled for hours and searched the archives. We have two configs we are testing. In both configs a requirement is that the user be forced to use the Squid proxy

Re: [squid-users] Proxy-Authorization headers

2011-11-04 Thread Amos Jeffries
On 5/11/2011 3:04 a.m., Markus Nilsson wrote: Hi! I'm having some trouble with kerberos (negotiate) authentication and the Proxy-Authorization header. Currently I am using digest, and it's working fine. I allow most request in squid, but am using a url_rewriter to check if the user really

Re: [squid-users] Reverse Proxy + Exchange OWA issue

2011-11-04 Thread Amos Jeffries
On 5/11/2011 5:03 a.m., Rick Chisholm wrote: I'm not intimidated by that option, but I prefer to use ports (which is still compiling from source FWIW) to make update management easier. Also this is a mission critical production box and I can't just blindly throw new versions at it without

Re: [squid-users] Squid 3.1.15 not enforcing browser proxy mode

2011-11-04 Thread Ron Starr
On 5/11/2011 11:04 a.m., Ron Starr wrote: To all, Maybe someone wiser than me can point out the error in our configuration. Have googled for hours and searched the archives. We have two configs we are testing. In both configs a requirement is that the user be forced to use the Squid proxy

Re: [squid-users] Squid 3.1.15 not enforcing browser proxy mode

2011-11-04 Thread Amos Jeffries
On 5/11/2011 2:36 p.m., Ron Starr wrote: On 5/11/2011 11:04 a.m., Ron Starr wrote: To all, Maybe someone wiser than me can point out the error in our configuration. Have googled for hours and searched the archives. We have two configs we are testing. In both configs a requirement is that