Hello list.
I have been trying to get NTLM authentication working with squid and winbind
under ubuntu 6.10. I can get user names and account with winbind, I can even try
using a domain user to login and I see this in my logs.
Dec 27 13:00:06 proxy pam_winbind[6734]: user 'domainuser' granted acc
ore these errors (as I am not sure if I will be using LDAP) and
> go ahead with squid configuration?
>
> Devendra
>
>
>
> -Original Message-
> From: Craig Van Tassle [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 27, 2006 4:53 PM
> To: Agrawal, Deven
Hello list.
I have been trying to get NTLM authentication working with squid and winbind
under ubuntu 6.10. I can get user names and account with winbind, I can even try
using a domain user to login and I see this in my logs.
Dec 27 13:00:06 proxy pam_winbind[6734]: user 'domainuser' granted acc
I'm trying to block streaming media from my users, and I'm not able to I have
this for my acls. I read on line the req_mime_type and rep_mime_type are both
needed.
I have these ACL's
acl media req_mime_type .*application/x-comet-log$
acl media req_mime_type .*application/x-mms-framed$
acl MIMETYPE
*snip*
By "on line" do you mean the FAQ
(http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication#head-1d6e24e071a1a5e65f112d9a96cdf1320684a8f2)?
If so, did you test the helper as the cache_effective_user? When
prompted for authentication, were you prompted for the Windows domain,
or did you includ
Chris Robertson wrote:
> Craig Van Tassle wrote:
>> *snip*
>> By "on line" do you mean the FAQ
>> (http://wiki.squid-cache.org/SquidFaq/ProxyAuthentication#head-1d6e24e071a1a5e65f112d9a96cdf1320684a8f2)?
>>
>> If so, did you test the helper as the
The best play to do that is at your border firewall. Then you can block all
outgoing traffic except what goes thew the Proxy. But if you are they are using
a domain account to get past the proxy then not much you can really do except
disable local account.
Andrei Antonelli wrote:
> I m using squi
Agung T. Apriyanto wrote:
> any large acl usage perhaps ?
Or any large Regex acl's. I have found that on my proxy, with ntlm_auth and
about 2mb of Regex ACL's I chew up about 1GB of ram and stick at about 20-30%
CPU usage. I tried a LARGE acl but that chewed up all the Ram on my server and
Sent the
I have been getting a lot of incorrect deny with my Squid system. I double
checked the ACL's that I am using and sites like belkin.com are not in any of my
acl's however they are still getting blocked. Is there how would I go about
finding out what ACL is blocking access to these sites?
Thanks
Cra
anks,
>
> Monica
>
>
>
>
--
Craig Van Tassle
Network Support
E-Mail: [EMAIL PROTECTED]
Cell: 815-276-3075
8200 Ridgefield Road
Crystal Lake, IL 60012
Chemtool, INC
Ray,
In my squid.conf I have this for ntlm auth and it works perfectly
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 80
auth_param basic program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic
auth_param basic children 5
auth_param ba
on denied)
> 2007/02/28 21:17:20| storeUfsCreate: Failed to create
> I:\Proxy/cache/00/00/0014 ((13) Permission denied)
> 2007/02/28 21:17:22| storeUfsCreate: Failed to create
> I:\Proxy/cache/00/00/0015 ((13) Permission denied)
> 2007/02/28 21:17:22| storeUfsCreate: Failed to create
> I:\Proxy/cache/00/00/0016 ((13) Permission denied)
>
> What could be the problem?
>
> Please help.
>
> Regards
>
>
>
>
--
Craig Van Tassle
Network Support
E-Mail: [EMAIL PROTECTED]
Cell: 815-276-3075
8200 Ridgefield Road
Crystal Lake, IL 60012
Chemtool, INC
;
>>
>> Generated Wed, 28 Feb 2007 22:49:09 GMT by squid (squid/2.6.STABLE1)
>>
>> Here is my squid.conf file, hoping it will help.
>>
>> http_port 3328
>
> You need to add 'transparent' to this line, ie:
>
> http_port 3328 transparent
>
> And make sure you've compiled squid with --enable-linux-netfilter .
>
> (And you also should upgrade, there's quite a few nasty bugs between
> squid-2.6.STABLE1 and
> Squid-2.6.STABLE9.)
>
>
>
>
> Adrian
>
>
>
>
--
Craig Van Tassle
Network Support
E-Mail: [EMAIL PROTECTED]
Cell: 815-276-3075
8200 Ridgefield Road
Crystal Lake, IL 60012
Chemtool, INC
13 matches
Mail list logo
