[squid-users] parent for https

2012-01-12 Thread Xizhen Du
Hi all, I am quite new for squid, and now facing a case and no idea how to get it work. There's 2 proxies: Proxy A: nearly a default setup, just configured cache_peer to B Proxy B: as the parent for A, accepts the requests from A So the simple picture is that: Web clients > A > B, and i

[squid-users] Re: Error validating user via Negotiate. Error returned 'BH received type 1 NTLM token'

2012-01-12 Thread Markus Moeller
Hi Muhammet, Do you use Kerberos for Windows from MIT ? The 'Network Identity Manager' is from there isn't it ? Which Browser do you use ? Markus "Muhammet Can" wrote in message news:canynonryeksbxpj8qq2ikyuoocia0bc2qr1rw8v0aqev6fc...@mail.gmail.com... Thank's for you reply Amos, I hav

[squid-users] CACHEMGR: log file entries

2012-01-12 Thread ftiaronsem
Dear all I am sorry to ask, but I am simply unable to get rid of the following type of log lines: CACHEMGR: @127.0.0.1 requesting 'storedir' They are polluting my cache.log. In my squid.conf I have: acl manager proto cache_object log_access deny manager all http_access allow manager localhost h

Re: [squid-users] How many proxies to run?

2012-01-12 Thread Gerson Barreiros
I have an unique server doing this job. My scenario is most the same as mentioned above. I just want to know if i can make this server a Virtual Machine, that will use shared hard disk / memory / cpu with another VMs.

[squid-users] Assertion failed error causing worker process to restart

2012-01-12 Thread alex sharaz
Hi, Running squid 3.2 snapshot starting up with -SYC and seeing 2012/01/12 16:06:30 kid8| Beginning Validation Procedure 2012/01/12 16:06:30 kid8| UFSSwapDir::doubleCheck: MISSING SWAP FILE 2012/01/12 16:06:30 kid8| UFSSwapDir::dumpEntry: FILENO 0053D933 2012/01/12 16:06:30 kid8| UFSSwapDir::dum

Re: [squid-users] Error validating user via Negotiate. Error returned 'BH received type 1 NTLM token'

2012-01-12 Thread Muhammet Can
Thank's for you reply Amos, I have downloaded negotiate_wrapper and set my squid-config as Markus described here; http://squid-web-proxy-cache.1019090.n4.nabble.com/NTLM-Kerberos-Authentication-with-Windows-7-td3331448.html Now I can connect the web over Squid, but it seems like it still use the

[squid-users] Sharepoint SSL Error

2012-01-12 Thread Dale J. Rodriguez
Hello World. Noob Here. I have successfully setup squid as a reverseproxy for port 80, however my attempts to set up the same server to point to a https server on sharepoint have failed. All I get is the authentication box, and the following error message in cache.log: fwdNegotiateSSL: Error

Re: [squid-users] Active Directory and user agents - complete ISA replacement

2012-01-12 Thread George Machitidze
Hello Super! Everything works fine including groups for basic, ntlm and negotiate. Is it possible to have Digest authentication with Windows 2003 AD? add following for your wiki page: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 5 auth_

Re: [squid-users] finding the bottleneck

2012-01-12 Thread E.S. Rosenberg
2012/1/11 jeffrey j donovan : > > On Jan 10, 2012, at 7:45 AM, E.S. Rosenberg wrote: > >> Hi, >> We run a setup where our users are passing through 0-2 proxies before >> reaching the Internet: >> - https 0 >> - http transparent 1 (soon also 2) >> - http authenticated 2 >> >> Lately we are experienc

Re: [squid-users] Active Directory and user agents - complete ISA replacement

2012-01-12 Thread George Machitidze
Nevermind - my fault On Redhat winbind is running with root and owner of file is root:root, i've changed it to squid. Best regards, George Machitidze On Thu, Jan 12, 2012 at 4:01 PM, George Machitidze wrote: > Here are first issues: > > [root@proxy ~]# kdestroy > > > > [root@proxy ~]# msktu

Re: [squid-users] Active Directory and user agents - complete ISA replacement

2012-01-12 Thread George Machitidze
Here are first issues: [root@proxy ~]# kdestroy [root@proxy ~]# msktutil --auto-update --verbose --computer-name squid-k -- init_password: Wiping the computer password structure -- get_dc_host: Attempting to find a Domain Controller to use -- get_dc_host: Found Domain Controller: TEST-admsdc

[squid-users] assertion failed: comm.cc:1255: "isOpen(fd)" when shutting down squid 3.2 snapshot

2012-01-12 Thread alex sharaz
Hi, excerpt from cache.log when running /usr/local/squid/sbin/squid -k shutdown 2012/01/12 10:45:59 kid7| Open FD READ/WRITE 82 apps.facebook.com:443 2012/01/12 10:45:59 kid7| Open FD READ/WRITE 83 apps.facebook.com:443 2012/01/12 10:45:59 kid7| Open FD READ/WRITE 84 http://s0.2mdn.net/

Re: [squid-users] Performanceproblem Squid with one URL - strange behaviour ...

2012-01-12 Thread Schulz, Andreas
On Thu, Jan 12, 2012 at 12:53:18PM +1300, Amos Jeffries wrote: Hi, > So doing I/O to a disk log somehow speeds up TCP throughput? strange definitely right ... but I'm not sure if this speeds up TCP throughput - but speeds up Squid ;-) > This sounds a bit like the speed problems we see with very l

Re: [squid-users] Active Directory and user agents - complete ISA replacement

2012-01-12 Thread George Machitidze
Hello James Great job! Thanks for reply I will check and update with tests :) Best regards, George Machitidze On Thu, Jan 12, 2012 at 1:00 PM, James Robertson wrote: >> When I try to use Opera browser I am getting ugly message after >> entering credentials: >> >> authenticateNegotiateHandleR

Re: [squid-users] Active Directory and user agents - complete ISA replacement

2012-01-12 Thread James Robertson
> When I try to use Opera browser I am getting ugly message after > entering credentials: > > authenticateNegotiateHandleReply: Error validating user via Negotiate. > Error returned 'BH received type 1 NTLM token' Opera does not support Kerberos as far as I know. You will still need to support N

[squid-users] Active Directory and user agents - complete ISA replacement

2012-01-12 Thread George Machitidze
Hello I am able to authenticate user agents via "Negotiate" with following: auth_param negotiate program /usr/lib64/squid/squid_kerb_auth auth_param negotiate children 10 auth_param negotiate keep_alive on I've configured binding with mskutil and with IE, Mozilla, some other apps everything work

Re: [squid-users] Problem compiling Squid 3.1.18 on Ubuntu 10.04 LTS - store.cc

2012-01-12 Thread Amos Jeffries
On 12/01/2012 8:04 p.m., Justin Lawler wrote: Hi, Any time line for the 3.1.19 release, or any beta releases :-) Betas are every first weekend of the month unless something serious happens to shift it. So 3.2.0.15 beta in 3 weeks unless reality pops its head up and changes things. 3.1.19 i

Re: [squid-users] squid 3.1.x with IIS SharePoint as back-end.

2012-01-12 Thread 巍俊葛
Thanks Amos, Currently, we use a VM ( vmware) to host a RHEL with squid running. I change the back-end site with only an IIS test web site which is hosted on the same IIS system. And it's just a png image file. And it seem working. On RHEL side, there is no limitations on outgoing on iptables rul