Re: [squid-users] Re: Re: squid_kerb_auth High CPU load.

2012-04-19 Thread Simon Dwyer
Hi Markus, I have actually got this now setup on a second machine. When i put in the export the HTTP_23 does not appear anymore which i am expecting. I will double check this in production tomorrow morning and see how i go. Simon On Thu, 2012-04-19 at 15:49 +1000, Simon Dwyer wrote: Hi

[squid-users] Re: squid + tproxy is not working properly when using url_rewriter and local apache script for youtube caching

2012-04-19 Thread x-man
Hi, thanks for the reply. Initially in the url_rewriter I was pointing to http://localhost/somescript.php. but after implementing tproxy and I saw the request are coming from customer real Ip to 127.0.0.1 then I replaced that line in the url_rewriter with ip address like 192.168.2.2 which is

[squid-users] squid_ldap_auth to AD user credentials?

2012-04-19 Thread Beto Moreno
Hi people. I had been reading info about squid_ldap_auth vs windows 2003 AD server, I have some questions that would like to know if someone can clear my brain. squid 2.7.x. Went a user have special characters on his password, once the browser open the credential window it won't accept the

RE: [squid-users] Authenticating to sharepoint NTLM

2012-04-19 Thread Clem
How is your squid.conf ? especially your cache_peer line ? -Message d'origine- De : Amos Jeffries [mailto:squ...@treenet.co.nz] Envoyé : jeudi 19 avril 2012 04:02 À : squid-users@squid-cache.org Objet : Re: [squid-users] Authenticating to sharepoint NTLM On 19.04.2012 12:09, Javier

[squid-users] Encrypted (Basic) Authentication

2012-04-19 Thread Christoph Mitasch
Hello, we have stored usernames and secure password hashes in a central OpenLDAP directory. We want to use Squid as a proxy for clients and require them to login using the central LDAP directory. This login should work over an encrypted connection since it's not an option to send the password

[squid-users] ESI support in SQUID

2012-04-19 Thread Dirk Högemann
Hi, I am trying to run SQUID with ESI support (parser is custom). This works fine until processed pages reference for example Javascript files with filesize bigger than 64K. In that case SQUID crashes. LOG: 2012/04/19 10:47:19.295| clientStreamCallback: Calling 1 with cbdata 0x85ecfac from node

[squid-users] Problem downloading large files

2012-04-19 Thread Leonardo
Hi all, We noticed that users behind our Squid cannot download files larger than 2 Gb: the connection is cut around that limit. reply_body_max_size is not set in squid.conf so download file size should be unlimited. I've done a tcpdump capture and examined it on Wireshark; I see a FIN from the

[squid-users] current status of bump-server-first + dynamic certs in 3.3??

2012-04-19 Thread Ahmed Talha Khan
Hey all, I want to use dynamic certificates (and/or mimic original ssl server certs) while running in a transparent mode. I know this is not possible in 3.2 because of the bump-client-first approach. Release roadmap for squid 3 says that bump-server-first is(will be) available in 3.3 which is

Re: [squid-users] NTLM, non-domain machines and keep-alive

2012-04-19 Thread Harry Mills
Hi, I have upgraded our squid to version 3.1.19 but I am still seeing the repeated popup box issue with non-domain member machines (windows machines). Domain member machines authenticate perfectly via NTLM, but non-domain member machines (Windows XP, Windows 7) pop up a password box three

Re: [squid-users] Problems with NTLM

2012-04-19 Thread Wladner Klimach
Look what I've got from cache.log from a Windows XP client : [2012/04/19 13:45:04, 0] utils/ntlm_auth.c:558(winbind_pw_check) Login for user [REDECAMARA]\[P_991064]@[CAINF-269652] failed due to [winbind client not authorized to use winbindd_pam_auth_crap. Ensure permissions on

Re: [squid-users] Problems with NTLM

2012-04-19 Thread Harry Mills
On 19/04/2012 17:52, Wladner Klimach wrote: Look what I've got from cache.log from a Windows XP client : [2012/04/19 13:45:04, 0] utils/ntlm_auth.c:558(winbind_pw_check) Login for user [REDECAMARA]\[P_991064]@[CAINF-269652] failed due to [winbind client not authorized to use

Re: [squid-users] Problems with NTLM

2012-04-19 Thread Harry Mills
Can you give any more details about what isn't working? Is it not authenticating for https, or not able to fetch https pages? Harry On 19/04/2012 18:43, Wladner Klimach wrote: I've included squid user in the group and is working now! But https access is not working. Any clue of what could be

[squid-users] NTLM not working with HTTPS pages

2012-04-19 Thread Wladner Klimach
Hello, I'm using NTLM scheme like this: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 30 startup=5 idle=5 auth_param ntlm keep_alive on And it is working fine except for https pages. Here is my basic squid.conf: acl to_localhost dst

[squid-users] Re: Correctoions (was TCP_SWAPFAIL/200)

2012-04-19 Thread Linda Walsh
Amos Jeffries wrote: On 18.04.2012 12:46, Linda Walsh wrote: It appears the local disk-store isn't growing over time -- so I'm assuming it it telling me the on-disk store isn't working right? Yes. Please prioritise the core dump investigation. Please use gdb and find out what the

Re: [squid-users] Re: Re: squid_kerb_auth High CPU load.

2012-04-19 Thread Simon Dwyer
Moved my production over to kerberos this morning with the correct export for kerberos and this is whats happening 20711 squid 20 0 32212 3748 1732 R 34.3 0.1 0:04.42 squid_kerb_auth

Re: [squid-users] Re: Re: squid_kerb_auth High CPU load.

2012-04-19 Thread Simon Dwyer
Had a closer look at the server and here is the cpuinfo [root@wp-proxy tmp]# cat /proc/cpuinfo processor : 0 vendor_id : AuthenticAMD cpu family : 15 model : 37 model name : AMD Opteron(tm) Processor 244 stepping: 1 cpu MHz : 1791.758 cache size

[squid-users] Re: Re: Re: squid_kerb_auth High CPU load.

2012-04-19 Thread Markus Moeller
How many request/sec does your squid serve ? I would not expect it to be that much higher then with NTLM. Markus Simon Dwyer m...@simmyd.net wrote in message news:1334870417.2408.38.ca...@sdwyer.federalit.net... Moved my production over to kerberos this morning with the correct export for

Re: [squid-users] Re: Re: Re: squid_kerb_auth High CPU load.

2012-04-19 Thread Simon Dwyer
Not sure how to give you the figures of req/sec but this morning when i flicked it over there would have been max 15 people using it for normal browsing. following is my krb5.conf incase i am missing something or doing something wrong. [logging] default = FILE:/var/log/krb5libs.log kdc =