RE: [squid-users] NTLM Authenticator Statistics 3.3.5

2013-09-30 Thread Kris Glynn
Thanks, I will look at upgrading but these are Production servers and I notice quite a few changes from 3.3.x to 3.4 so I might need to do something about it in the meantime. My idea of a fix is the following to perhaps run every 48hours... for pid in `/usr/bin/squidclient -p 8080 mgr:ntlmauthe

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Eliezer Croitoru
I will try to update my helper to work with redis as backhand. Eliezer On 09/30/2013 10:18 PM, Warren Baker wrote: > On Mon, Sep 30, 2013 at 5:11 PM, Eliezer Croitoru > wrote: >> OK so a pesudo code of the helper would be nice. >> datastore used:(what nosql engine?) > > Redis. > >> I assume i

Re: [squid-users] Too many TCP_DENIED/407 when using Kerberos authentication

2013-09-30 Thread Ron Wheeler
Yes Yes Nothing? I think that the problem comes from the fact that the browser has no idea about what the authentication will be (if any) when it first makes the request. Once the server says "Whoa, Why should I let you in?", the browser knows that it needs to engage in an authentication proce

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Warren Baker
On Mon, Sep 30, 2013 at 5:11 PM, Eliezer Croitoru wrote: > OK so a pesudo code of the helper would be nice. > datastore used:(what nosql engine?) Redis. > I assume it's a simple test of "is the ip exists?" > in a case of yes then reply with OK > in a case that it dosnt' exits reply with ERR. We

[squid-users] Too many TCP_DENIED/407 when using Kerberos authentication

2013-09-30 Thread Hooman Valibeigi
Hi I have successfully configured kerberos authentication in squid 3.1.10 using squid_kerb_auth helper and tested it in IE and Chrome on machine joined to a Windows 2008 domain controller. I took a look at squid's access.log and recognized that almost 40% of the requests have failed on the first

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Amos Jeffries
On 1/10/2013 12:55 a.m., Warren Baker wrote: On Fri, Sep 27, 2013 at 4:53 PM, Warren Baker wrote: On Fri, Sep 27, 2013 at 4:27 PM, Amos Jeffries wrote: Arg. yes, too much wading through IP specs today. I meant rfc1738 encoding (Squid flavour of it anyway). Ah ok. So i need to cater for this.

Re: [squid-users] Setting up Squid 3

2013-09-30 Thread Amos Jeffries
On 1/10/2013 1:52 a.m., Nikolas Kallis wrote: Hello, I recently installed Squid 3 and need help setting it up seing the developers didn't bother writing documentation for it. So far, I have been using my operating systems distribution documentation for configuration, but, as with all Linux

Re: [squid-users] Log rotation kills helpers

2013-09-30 Thread Alex Rousskov
On 30/09/2013 7:26 p.m., Kris Glynn wrote: > Shouldn't a squid -k rotate leave helpers > alone when it's just instructing squid to rotate the logs? Yes, but nobody has implemented that functionality yet. Implementing it is not easy because of the complication that Amos has mentioned below: On 09

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Eliezer Croitoru
OK so a pesudo code of the helper would be nice. datastore used:(what nosql engine?) I assume it's a simple test of "is the ip exists?" in a case of yes then reply with OK in a case that it dosnt' exits reply with ERR. This is exactly what I was writing my helper for. The golang helper might be n

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Warren Baker
Hi Eliezer, On Mon, Sep 30, 2013 at 3:06 PM, Eliezer Croitoru wrote: > > Just wondering if you can share the Golang source code? I can't as it is closed source. In a nutshell it a receives a request, checks a session table (in a nosql datastore) and responds. As to whether I have tried a basic o

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Eliezer Croitoru
On 09/26/2013 02:42 PM, Warren Baker wrote: > HI Guys, > > I have a problem where the helpers are exiting after a period of time > in an external_acl_type setup. > The acl is defined as follows: > > external_acl_type portal_page ipv4 children-idle=5 children-startup=5 > ttl=60 negative_ttl=0 conc

Re: [squid-users] Setting up Squid 3

2013-09-30 Thread Eliezer Croitoru
Hey there, I hope you will manage to make it work. There are lots of documentation inside squid realms and also outside of them. the first thing is: http://squidbook.org/index-two.html there are couple other books and tutorials that actually makes you understand what you are doing. try to browse t

Re: [squid-users] Setting up Squid 3

2013-09-30 Thread Odhiambo Washington
On 30 September 2013 15:52, Nikolas Kallis wrote: > Hello, > > > > I recently installed Squid 3 and need help setting it up seing the > developers didn't bother writing documentation for it. I believe your distro installed a file called squid.conf.documented - which is what you should start with.

[squid-users] Setting up Squid 3

2013-09-30 Thread Nikolas Kallis
Hello, I recently installed Squid 3 and need help setting it up seing the developers didn't bother writing documentation for it. So far, I have been using my operating systems distribution documentation for configuration, but, as with all Linux documentation, the documentation sucks. htt

Re: [squid-users] external_acl_type helper exiting

2013-09-30 Thread Warren Baker
On Fri, Sep 27, 2013 at 4:53 PM, Warren Baker wrote: > On Fri, Sep 27, 2013 at 4:27 PM, Amos Jeffries wrote: >> Arg. yes, too much wading through IP specs today. I meant rfc1738 encoding >> (Squid flavour of it anyway). > > Ah ok. So i need to cater for this. > > Thanks for the point in the right

Re: Odp: Re: Odp: Re: [squid-users] Skype through SQUID integrated with AD

2013-09-30 Thread Amos Jeffries
On 30/09/2013 11:20 p.m., kazio wolny wrote: I have this squid on ubuntu 12.04 tls. Never version should I install from PPA (like https://launchpad.net/~pdffs/+archive/squid-stable)? Could you give be better source? I found the cause of the problems. This was the last line: cache_effective_gro

Odp: Re: Odp: Re: [squid-users] Skype through SQUID integrated with AD

2013-09-30 Thread kazio wolny
Dnia Czwartek, 26 Września 2013 16:04 Amos Jeffries napisał(a) > On 26/09/2013 7:35 a.m., kazio wolny wrote: > > Dnia Środa, 25 Września 2013 16:17 Amos Jeffries > > napisał(a) > >> On 26/09/2013 12:58 a.m., kazio wolny wrote: > >>> Hello, > >>> > >>> I get tired of the topic already two days a

[squid-users] Re: squid process offen restart by itself

2013-09-30 Thread Ding Guigeng
i created a vm with 3 cores to test 1core frontend and 2cores backend. there are my config files: access.conf backend.conf common.acl.

Re: [squid-users] squid authentication not working with mysql

2013-09-30 Thread Amos Jeffries
Can Nabble users please post directly to the squid-users mailing list. The Nabble forum is supposed to only be a mirror of our mailing list. Their interface for posting often removes critical information, re-formats submissions, and sometimes even does not deliver posts to the mailing list.

Re: [squid-users] NTLM Authenticator Statistics 3.3.5

2013-09-30 Thread Amos Jeffries
On 30/09/2013 8:26 p.m., Kris Glynn wrote: Thanks Amos, that explains helper activity in the cache.log around rotate time. When the problem occurred I didn't run a mgr:ntlmauthenticators report but on one of the proxies just now it has 77 shutting down state and report is here - http://pastebi

Re: [squid-users] Re: squid process offen restart by itself

2013-09-30 Thread Amos Jeffries
On 30/09/2013 7:14 p.m., Ding Guigeng wrote: i removed workers 2 only use cache_dir aufs /cache1 10240 16 256 then squid -k reconfig it shows " Sep WARNING: Changing 'workers' (from 2 to 1) is not supported and ignored " in cache.log You have to do a full shutdown then restart for that one due

[squid-users] squid authentication not working with mysql

2013-09-30 Thread Tshooter
I am using ubuntu 12.04 and centos 6 as virtual machine on it. I've configured squid on centos and I'm trying to access it from browsers in ubuntu. I checked using browsers in Centos also. It worked fine when I used ncsa authentication, but it is not working with mysql db authentication. I used t

RE: [squid-users] NTLM Authenticator Statistics 3.3.5

2013-09-30 Thread Kris Glynn
Thanks Amos, that explains helper activity in the cache.log around rotate time. When the problem occurred I didn't run a mgr:ntlmauthenticators report but on one of the proxies just now it has 77 shutting down state and report is here - http://pastebin.com/jhaFeW9H Regards - Kris Glynn: (07)

Re: [squid-users] NTLM Authenticator Statistics 3.3.5

2013-09-30 Thread Amos Jeffries
On 30/09/2013 7:26 p.m., Kris Glynn wrote: Getting back to the initial problem.. I first discovered it when users reported they couldn't authenticate to one of the proxies, when I logged into the squid server the cache.log was full of errors like "WARNING: external ACL 'ldap_group' queue overlo