Re: [squid-users] squid 3.2 and POST

2013-07-16 Thread Eugene M. Zheganin
Hi. On 16.07.2013 10:30, Amos Jeffries wrote: Nasty as they are, the above are the perfectly normal working NTLM behaviour. If your traces are showing something else going on *by Squid* then you have a bug. We have indeed found a few such bugs in Squid NTLM and persistence handling, once you

Re: [squid-users] Advice: ntlm_auth from samba4 or negotiate_wrapper ?

2013-07-16 Thread Amos Jeffries
On 16/07/2013 5:02 a.m., Michele Bergonzoni wrote: I would like to hear your advice about kerberos auth configuration on a new installation. This will be an installation with two redundant Linux based servers, clients will be mostly windows joined to active directory, with AD users logged

Re: [squid-users] Re: Squid still not using icap_preview_size?

2013-07-16 Thread Amos Jeffries
On 16/07/2013 5:40 a.m., Tom Tom wrote: Hi Any hints/answers concerning the icap_preview_size with the current squid (3.3.7/3.3.8)? Nothing has changed in that regard AFAIK. If it is important to you, please subscribe to this bug and you will receive notification if/when it changes:

Re: [squid-users] Re: Squid only caches a few images and TCP_Miss everything else

2013-07-16 Thread Amos Jeffries
On 16/07/2013 8:10 a.m., jc.yin wrote: Haha I'm doing this for a client but having had to research all about Squid the past week, I'm thinking of setting up my own as well :p I think tomorrow I'll just set up a local Squid server to test out the results. In the mean time I'll upload the

[squid-users] Re: Squid only caches a few images and TCP_Miss everything else

2013-07-16 Thread jc.yin
Thank You so much for this really informative post! It's cleared up a lot of things which were confusing for me, you should really include this in the Squid FAQ or somewhere so future Squid users can quickly understand that their cache is working when they see memory hits, otherwise a lot of users

[squid-users] Re: Squid only caches a few images and TCP_Miss everything else

2013-07-16 Thread jc.yin
Oh but there is still one thing I'm not so clear about. This is what happens 1. Access CNN home page via Squid for the first time 2. Squid shows a huge list of misses 3. Browse to another page 4. Browse back to CNN home page 5. Squid shows just a few misses but no hits either 6. Refresh browser

Re: [squid-users] Advice: ntlm_auth from samba4 or negotiate_wrapper ?

2013-07-16 Thread Eugene M. Zheganin
Hi. On 15.07.2013 23:02, Michele Bergonzoni wrote: I did a few tests with ntlm_auth from samba4, and it seems to work, with some residual problems with firefox and PCs not joined in the domain, and an extra authentication popup at the beginning from IE. I didn't get to the point of having a

RE: [squid-users] Squid icap respmod is not caching

2013-07-16 Thread Martin Sperl
Hi! So maybe some insight into our ICAP application: It essentially acts as a proxy for mobile carriers (for handling MSISDNs and such) and has a similar functionality as some of those simple anonymizing proxies: * it takes a request for http://a.b.c/www.squid-cache.org/default.css * and the

Re: [squid-users] Re: Squid only caches a few images and TCP_Miss everything else

2013-07-16 Thread Antony Stone
On Tuesday 16 July 2013 at 12:18:09, jc.yin wrote: Oh but there is still one thing I'm not so clear about. This is what happens 1. Access CNN home page via Squid for the first time 2. Squid shows a huge list of misses 3. Browse to another page 4. Browse back to CNN home page 5. Squid

Re: [squid-users] squid-3.3.5 hangs the entire system

2013-07-16 Thread Amos Jeffries
On 16/07/2013 8:32 a.m., Grant wrote: Network or kernel level. You can try to look at the MTU and other stuff. to make sure there is no DNS interception etc. For me it seems like a network issue. If it's a network issue, could you be any more specific as far as what to look for? 3.3.8 might

Re: [squid-users] Re: Squid only caches a few images and TCP_Miss everything else

2013-07-16 Thread Amos Jeffries
On 16/07/2013 10:18 p.m., jc.yin wrote: Oh but there is still one thing I'm not so clear about. This is what happens 1. Access CNN home page via Squid for the first time 2. Squid shows a huge list of misses Neither cache has anything. Both are being filled for the first time. 3. Browse to

Re: [squid-users] X-Forwarded-For and cache_peer_access

2013-07-16 Thread Amos Jeffries
On 16/07/2013 7:31 a.m., Michael Graham wrote: Hi all, I'm having a problem getting squid to select the upstream proxy based on the source address set in the X-Forwarded-For header. Here is the appropriate lines from my squid.conf: follow_x_forwarded_for allow all You should never have

Re: [squid-users] X-Forwarded-For and cache_peer_access

2013-07-16 Thread Michael Graham
On Tue, 2013-07-16 at 23:30 +1200, Amos Jeffries wrote: Does the X-Forwarded-For header actually contain an IP from the 172.21.120.0/24 subnet (and not some IPv6 address from that subnets IPv6 ranges). Yeah it seems to be: GET http://www.google.com/ HTTP/1.1 Accept: */* Host: www.google.com

Re: [squid-users] Advice: ntlm_auth from samba4 or negotiate_wrapper ?

2013-07-16 Thread Michele Bergonzoni
My sincere thanks to Amos for his deep insight and to Eugene for his practical advice. This was of great help for me, and I think will help future googlers as well. Amos says: Popups you are trying to avoid is a browser feature. It is 100% up to the client to use the password manager and/or

Re: [squid-users] squid-3.3.5 hangs the entire system

2013-07-16 Thread Grant
after you try this try to launch it with firebug to make sure what object is the problem. I've launched Firefox with Firebug. What should I monitor while loading a page? The stats shown by the Net panel usually make issues pretty clear. Take particular attention to any individual object

[squid-users] Squid Reverse Proxy cannot open ports

2013-07-16 Thread jc.yin
I'm not sure if what I've done is correct but I've tried my best to follow the instructions found on the Squid documentation page. http://wiki.squid-cache.org/SquidFaq/ReverseProxy Basically I need to set up a reverse Squid proxy with the web server on the same server. Basically what I did was:

Re: [squid-users] Re: Squid still not using icap_preview_size?

2013-07-16 Thread Alex Rousskov
On 07/15/2013 11:40 AM, Tom Tom wrote: Any hints/answers concerning the icap_preview_size with the current squid (3.3.7/3.3.8)? I do not think anything has changed since the email thread you quoted was created. The advice there should still be valid: Ignore the icap_preview_size directive

[squid-users] Re: Advice: ntlm_auth from samba4 or negotiate_wrapper ?

2013-07-16 Thread Markus Moeller
Eugene M. Zheganin e...@norma.perm.ru wrote in message news:51e51eca.2010...@norma.perm.ru... Hi. On 15.07.2013 23:02, Michele Bergonzoni wrote: I did a few tests with ntlm_auth from samba4, and it seems to work, with some residual problems with firefox and PCs not joined in the domain, and

Re: [squid-users] Squid Reverse Proxy cannot open ports

2013-07-16 Thread Eliezer Croitoru
Hey, if you insist on serving the local port 80 from the same server I would say you need to make sure the servers are listening to the current port using: netstat -ntlp what is the output?? Eliezer On 07/17/2013 12:00 AM, jc.yin wrote: I'm not sure if what I've done is correct but I've tried

Re: [squid-users] Squid + Samba4

2013-07-16 Thread Eliezer Croitoru
Hey, I would say if you want a replica of the AD data use LDAP and not anything else. I havn't tried samba4 yet So I cant tell you a thing about it and what it suppose to do. If you have some description of samba4 replication thing you just told me about I would be happy to hear more about it.

Re: [squid-users] squid-3.3.5 hangs the entire system

2013-07-16 Thread Eliezer Croitoru
On 07/15/2013 11:32 PM, Grant wrote: Network or kernel level. You can try to look at the MTU and other stuff. to make sure there is no DNS interception etc. For me it seems like a network issue. If it's a network issue, could you be any more specific as far as what to look for? 3.3.8 might

Re: [squid-users] Re: Squid only caches a few images and TCP_Miss everything else

2013-07-16 Thread Eliezer Croitoru
please first remove all comments from squid.conf using: grep -v ^# squid.conf | grep -v ^$ This should leave only your settings in a readable way. And if you can post it here it will be smarter. Eliezer On 07/15/2013 11:12 PM, jc.yin wrote: Okay so here is the dropbox link for my squid.conf

Re: [squid-users] squid-3.3.5 hangs the entire system

2013-07-16 Thread Grant
Network or kernel level. You can try to look at the MTU and other stuff. to make sure there is no DNS interception etc. For me it seems like a network issue. If it's a network issue, could you be any more specific as far as what to look for? 3.3.8 might be a bit better but that could be my