Re: [squid-users] active directory

2007-07-31 Thread D & E Radel
Whoops. Change replace that "dc=second" with "dc=first" in the DOMAIN1 part of the script and you'll understand what I meant. I didn't proof read after making the edits. Cheers, Dietrich D & E Radel wrote: UK SquidUser (AXA-TECH-UK) wrote: hi, i'm

Re: [squid-users] active directory

2007-07-31 Thread D & E Radel
UK SquidUser (AXA-TECH-UK) wrote: hi, i'm trying to migrate to a new platform of squid proxy servers using active directory. I can't seem to find any pointers on configuring squid/kerberos/samba to use multiple domains for authentication.. i've configured a test box to point through a single doma

Re: [squid-users] ldap and digest on squid for windows

2007-07-27 Thread D & E Radel
[EMAIL PROTECTED] wrote: Hi, Thank you for this information but I doubt, because I read the (poor) documentation and digest_ldap_auth is not for store a password in AD ! The only good way i can find on the web is this link : http://nixforums.org/about143268.html&highlight= Thank and have a g

Re: [squid-users] Help needed for squid with LDAP

2007-07-25 Thread D & E Radel
Jagdeep Shrivastav wrote: Hi, Thanks for your prompt reply. I went through the url to completethe configuration, when i execute the command /usr/lib/squid/squid_ldap_auth -b "dc=my,dc=domain" ldapserver or /usr/lib/squid/squid_ldap_auth -b "dc=my,dc=domain" -h IPofLDAPServer and after providi

Re: [squid-users] squid_ldap_group problems

2007-07-12 Thread D & E Radel
You could try something like this: /usr/lib/squid/squid_ldap_group -R -b "ou=cramif,dc=cramif,dc=cnamts,dc=fr" -D "cn=username,cn=users,dc=cramif,dc=cnamts,dc=fr" -w "password" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof=cn=%a,dc=cramif,dc=cnamts,dc=fr))" -h 55.171.210.72 Replace use

Re: [squid-users] Squid integrated with AD to allow restriction per user

2007-06-27 Thread D & E Radel
Frederick Willian Borges Pohl wrote: Hello, I have been given a task that I don´t know were to start, so I´m asking fellow list subscribers for some guidance. I need to implement web restrictions for different departments. For example, I need that the marketing department has access to hotmai

Re: [squid-users] proxy avoidance

2007-06-26 Thread D & E Radel
Matus UHLAR - fantomas wrote: On 24.06.07 22:36, Jigar Raval wrote: How to block proxy avoidance in squid. if you are asking, use question mark (?) please. You can't block proxy avoidance in proxy. You can block it on router/firewall. The principle of proxy avoidance is that proxy does not kn

Re: [squid-users] Delay pools (throttling) for specified websites?

2007-06-24 Thread D & E Radel
D & E Radel wrote: [EMAIL PROTECTED] wrote: No takers? Thanks in advance. :-) D.Radel. D & E Radel wrote: Hi all, I am currently using a delay pool to throttle users a certain ldap_group to a slow speed. I wish to throttle access to certain bandwidth heavy websites. I added

Re: [squid-users] Re: Squid auth box will not appear for everyone.

2007-06-22 Thread D & E Radel
Dan OConnor wrote: I have just replaced my old squid box with a new one, the old proxy was set to do local administration and the new one is set to do LDAP. I do have the authentication working for most of the users but there is a few that will not get prompted for a box and I can't figure it ou

Re: [squid-users] Squid and Windows Update

2007-06-21 Thread D & E Radel
Henrik Nordstrom wrote: tor 2007-06-21 klockan 14:22 +0100 skrev Julian Pilfold-Bagwell: If I am to guess you might need to allow access to the windows update servers without using authentication. Is it possible to do that while retaining authentication for users? Yes. Just allow access t

Re: [squid-users] Delay pools (throttling) for specified websites?

2007-06-20 Thread D & E Radel
[EMAIL PROTECTED] wrote: No takers? Thanks in advance. :-) D.Radel. D & E Radel wrote: Hi all, I am currently using a delay pool to throttle users a certain ldap_group to a slow speed. I wish to throttle access to certain bandwidth heavy websites. I added the ACL "slow_sites"

Re: [squid-users] Delay pools (throttling) for specified websites?

2007-06-19 Thread D & E Radel
No takers? Thanks in advance. :-) D.Radel. D & E Radel wrote: Hi all, I am currently using a delay pool to throttle users a certain ldap_group to a slow speed. I wish to throttle access to certain bandwidth heavy websites. I added the ACL "slow_sites" to my existing delay p

[squid-users] Delay pools (throttling) for specified websites?

2007-06-15 Thread D & E Radel
Hi all, I am currently using a delay pool to throttle users a certain ldap_group to a slow speed. I wish to throttle access to certain bandwidth heavy websites. I added the ACL "slow_sites" to my existing delay pool as follows: acl slow_sites url_regex -i "/squid_stuff/slow_sites.txt"

Re: [squid-users] Squid3 Samba3 PDC Authentication via LDAP -- help

2007-06-13 Thread D & E Radel
Etienne Pretorius wrote: Hello List, I have a slight problem. I need to squid to authenticate against a samba PDC with an LDAP backend. I would like it to do the Authentication without the help of SAMBA and to get the password right out of the LDAP server and unhash. Would this be the he

Re: [squid-users] Missing "/var/log/squid/access.log"

2007-06-05 Thread D & E Radel
Henrik Nordstrom wrote: tis 2007-06-05 klockan 16:09 +1200 skrev D & E Radel: Henrik Nordstrom wrote: tis 2007-06-05 klockan 14:48 +1200 skrev D & E Radel: Hi there, After upgrading from squid 2.5 to 2.6 (Debian oldstable to Debian stable), everything now seems to work except SA

Re: [squid-users] Missing "/var/log/squid/access.log"

2007-06-04 Thread D & E Radel
Henrik Nordstrom wrote: tis 2007-06-05 klockan 14:48 +1200 skrev D & E Radel: Hi there, After upgrading from squid 2.5 to 2.6 (Debian oldstable to Debian stable), everything now seems to work except SARG. SARG now complains about a missing: /var/log/squid/access.log Is there a chang

[squid-users] Missing "/var/log/squid/access.log"

2007-06-04 Thread D & E Radel
Hi there, After upgrading from squid 2.5 to 2.6 (Debian oldstable to Debian stable), everything now seems to work except SARG. SARG now complains about a missing: /var/log/squid/access.log Is there a change in the squid.conf that requires me to specify this somewhere? Thanks in advance, D.Ra

Re: [squid-users] delay pools and acls

2007-06-04 Thread D & E Radel
Henrik Nordstrom wrote: tis 2007-06-05 klockan 07:40 +0700 skrev Arianto C Nugroho: Quoting McDouglas <[EMAIL PROTECTED]>: Hi! Is is possible to to assign delay pools to acls instead of domain names? I use an external acl to verify if a given user belongs to a given windows group (using wbi

Re: [squid-users] Upgrading from 2.5.9 to 2.6.5 - woes + squish woes

2007-06-03 Thread D &amp; E Radel
D & E Radel wrote: Henrik Nordstrom wrote: tis 2007-05-29 klockan 16:50 +1200 skrev D & E Radel: Dang! Adding the line: "HTTP_PORT 3128" stops the error, but now I get no authentication prompt in my browser. Restarting squid is fine, but it doesn't seem to talk

Re: [squid-users] Upgrading from 2.5.9 to 2.6.5 - woes + squish woes

2007-06-02 Thread D &amp; E Radel
Henrik Nordstrom wrote: tis 2007-05-29 klockan 16:50 +1200 skrev D & E Radel: Dang! Adding the line: "HTTP_PORT 3128" stops the error, but now I get no authentication prompt in my browser. Restarting squid is fine, but it doesn't seem to talk to my client's browser a

Re: [squid-users] How to deny a specific URL?

2007-06-02 Thread D &amp; E Radel
Matt wrote: Does Squid need restarted everytime you add to blocked sites? Matt I put all each url on a separate line in a text file and use the following: # Block websites using url or keywords. # Uses "\.file$" format to block file extensions #--

Re: [squid-users] How to deny a specific URL?

2007-06-02 Thread D &amp; E Radel
Steve Snyder wrote: Looking around, I find plenty if examples on how to block object types and/or domain, but not on a full URL. Can someone point to an example of how, on Squid 2.6S13, to block access to a specific URL? Thanks. I put all each url on a separate line in a text file and us

Re: [squid-users] Upgrading from 2.5.9 to 2.6.5 - woes + squish woes

2007-05-29 Thread D &amp; E Radel
# ADMINISTRATIVE PARAMETERS # - # Email address displayed when error occurs or access is denied #----------- cache_mgr [EMAIL PROTECTED] Amos Jeffries wrote: D &

[squid-users] Upgrading from 2.5.9 to 2.6.5 - woes + squish woes

2007-05-28 Thread D &amp; E Radel
Hi there, I was running Debian old stable until today. I upgraded to current stable, rebooted and all was fine. Squid seemed fine. I then installed Squish - which went badly, so I removed it as per their FAQ file. Squid was a no go. I then reverted to my old previously working squid.conf and

[squid-users] Squid + daily quotas per user (what is the best solution?)

2007-05-24 Thread D &amp; E Radel
Hi there, I have googled and also searched the mail archives. Is "squish" the best package to limit individual users to xMB per day? Or is there something better? Thanks in advance. D.Radel.

Re: [squid-users] ldap_groups +squid

2006-04-04 Thread D &amp; E Radel
This article may help: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory It covers ldap_group. regards D.Radel. - Original Message - From: "Walter Pabon Guerra" <[EMAIL PROTECTED]> To: Sent: Wednesday, April 05, 2006 8:30 AM Subject: [squid-u

Re: [squid-users] Squid + AD

2006-03-28 Thread D &amp; E Radel
rd"? Regards, D.Radel. ----- Original Message - From: "Alexandre augusto" <[EMAIL PROTECTED]> To: "D & E Radel" <[EMAIL PROTECTED]> Sent: Wednesday, March 29, 2006 1:26 AM Subject: Re: [squid-users] Squid + AD Hi Radel, Thanks for your reply take

Re: [squid-users] Squid Active directory, Samba and Kerberos

2006-03-17 Thread D &amp; E Radel
One advantage of simple ldap authentication is that you do not need samba, winbind, etc, hassles. All you do is add a couple of lines to your squid.conf to use the ldap_auth helper to authenticate, and the squid_ldap_group helper if you want to test whether Active Directory user x is in Active

Re: [squid-users] squid and Windows update

2006-03-05 Thread D &amp; E Radel
For me, sometimes it works, sometimes it doesn't. I made sure that .microsoft.com url is not cached or needing authentication. - Original Message - From: "Dominique Bagnato" <[EMAIL PROTECTED]> To: Sent: Monday, March 06, 2006 4:36 PM Subject: [squid-users] squid and Windows update

Re: [squid-users] Re: How to check caching and performance of Squid?

2006-03-02 Thread D &amp; E Radel
Check this out: http://sourceforge.net/projects/squidoptimizer/ Many thanks.

Re: [squid-users] How to check caching and performance of Squid?

2006-03-01 Thread D &amp; E Radel
Cachemgr comes with SQUID , and needs to be installed in the cgi-bin of a local webmaster; then it can be referred too as in : http://yourhost/cgi-bin/cachemgr.cgi However various access controls apply, see squid.conf.default for details. Thanks for that. I am running the default Debian sta

Re: [squid-users] How to check caching and performance of Squid?

2006-03-01 Thread D &amp; E Radel
Many thanks Mark. http reqs/sec; during office time , in Cachemgr - Cache Utilization is a good paramter to look at in performance terms. Is this in some file/log that Squid generates, or is there a program that is run to see these while squid is running? Cheers, D.Radel.

[squid-users] How to check caching and performance of Squid?

2006-03-01 Thread D &amp; E Radel
Hi there, I have been running a Squid server for 6 months or more and it seems to work fine. ACLs work fine, authentication, etc. However, users complain that some sites do not appear to being cached. It would seem that the server is retrieving the data from the various webservers each time

Re: [squid-users] Special error message possible?

2006-02-27 Thread D &amp; E Radel
You can create an ACL for local IP addresses and block those in squid.conf. You can also assign a customized error message for this ACL using "deny_info" to display a custom html page with your desired message. - Original Message - From: "Ralf Hildebrandt" <[EMAIL PROTECTED]> To: Se

Re: [squid-users] Cannot authorize payment

2006-02-21 Thread D &amp; E Radel
I learned to always backup my squid.conf prior to making any changes. :-) - Original Message - From: "Casey King" <[EMAIL PROTECTED]> To: "'Mark Elsen'" <[EMAIL PROTECTED]> Cc: "'Squid Mailing List'" Sent: Wednesday, February 22, 2006 10:56 AM Subject: RE: [squid-users] Cannot authori

Fw: [squid-users] Re: URL's that begins with a minus

2006-02-07 Thread D &amp; E Radel
From: "Tim Bates" <[EMAIL PROTECTED]> To: "D & E Radel" <[EMAIL PROTECTED]> Sent: Wednesday, February 08, 2006 11:46 AM Subject: Re: [squid-users] Re: URL's that begins with a minus >> That url works through my squid proxy or without it. > So

Re: [squid-users] Re: URL's that begins with a minus

2006-02-07 Thread D &amp; E Radel
From: "Nick Duda" <[EMAIL PROTECTED]> Subject: RE: [squid-users] Re: URL's that begins with a minus That url works through my squid proxy or without it. So I wonder why the OP's Squid will not allow it?

Re: [squid-users] Re: URL's that begins with a minus

2006-02-07 Thread D &amp; E Radel
Hello I've got the same problem with firefox (w/o squid). It seems you can't resolve a hostname starting with a minus. Aurélien Requiem The url http://-kol.deviantart.com/ works for me on IE6 and Firefox 1.07 with no problems. No squid on that network though. Urls that start with a minus s

Re: [squid-users] Squid with Anti-virus.

2006-02-03 Thread D &amp; E Radel
Most people use an anti-virus aware box (commercial or not), as a configured parent for squid. So you get a pattern as in : client -> SQUID -> Anti-virus+BOX -> The Net What if you go: client -> SQUID -> ADSL Router ?

Re: [squid-users] Windows Update through Squid cache fails

2006-02-02 Thread D &amp; E Radel
I have configured the (Windows 2000 & XP) clients on the LAN to use Squid as a proxy for web access. This (mostly) works without any issues (for other sites) except for the Windows security updates. Can anything be done about this http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#s

Re: [squid-users] squid & AD

2006-01-31 Thread D &amp; E Radel
Here ya go: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory Regards, D.Radel. - Original Message - From: "Jacob, Stanley (GE Consumer Finance, consultant)" <[EMAIL PROTECTED]> To: Sent: Wednesday, February 01, 2006 10:29 AM Subject: [squid-u

Re: [squid-users] Squid proxy and outlook express

2006-01-27 Thread D &amp; E Radel
Simplest solution: In our setup the default gateway IP issued by DHCP server is that of our ADSL router. All ports are blocked on the router's built-in firewall except 25 and 110 so that email is inrestricted. Nothing else gets through. To access the www, browsers are configured to use Squid as

Re: [squid-users] Authentication.

2006-01-24 Thread D &amp; E Radel
http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory - Original Message - From: "Fernando Lujan" <[EMAIL PROTECTED]> To: Sent: Wednesday, January 25, 2006 5:23 AM Subject: [squid-users] Authentication. Hi all, I'm researching a way to authent

Re: [squid-users] FW: SQUID_LDAP_AUTH

2006-01-14 Thread D &amp; E Radel
http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory grol - Original Message - From: "Meyerovich Aleksandr EB_NY" <[EMAIL PROTECTED]> To: Sent: Saturday, January 14, 2006 3:35 AM Subject: [squid-users] FW: SQUID_LDAP_AUTH I meant SQUID_LDAP_GROUP

Re: [squid-users] Squid Authentication Methods

2006-01-11 Thread D &amp; E Radel
Hi there, Here is a solution that would work. You could call a custom script from your squid.conf e.g. auth_param basic program /etc/squid/my_custom_script.sh auth_param basic children 5 auth_param basic realm Squidward Proxy auth_param basic credentialsttl 5 hours My script goes somethin

Re: [squid-users] Squid is blocking access to some BBC news sites

2006-01-06 Thread D &amp; E Radel
Hi folks Its sorted now, D& E Radels solution worked. Mark im afraid your solution still caused me a similar error. Same solution, just a syntax error. "deny all" was in the wrong place (and I am not sure whether the lowercase F in "for" affects anything - Are Squid ACLs case sensitive?).

Re: [squid-users] Squid is blocking access to some BBC news sites

2006-01-06 Thread D &amp; E Radel
Try: header_access X-Forwarded-For deny all Deny should come afterwards. D.Radel. - Original Message - From: "Jason Bassett" <[EMAIL PROTECTED]> To: Sent: Saturday, January 07, 2006 10:31 AM Subject: Re: [squid-users] Squid is blocking access to some BBC news sites Hello again

Re: [squid-users] Squid and LDAP authentication

2006-01-04 Thread D &amp; E Radel
Step by step: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory D.Radel. - Original Message - From: "Nolan Rumble" <[EMAIL PROTECTED]> To: Sent: Wednesday, January 04, 2006 10:01 PM Subject: [squid-users] Squid and LDAP authentication Hi, I'

Re: [squid-users] New to List needing squid.conf help!

2006-01-02 Thread D &amp; E Radel
id restart Regards, D.Radel. - Original Message - From: Mark T. C. To: D & E Radel Sent: Tuesday, January 03, 2006 8:01 AM Subject: Re: [squid-users] New to List needing squid.conf help! When I try and compile (squid -k reconfigure) after adding these lines to squid.conf, I get er

Re: [squid-users] New to List needing squid.conf help!

2006-01-01 Thread D &amp; E Radel
Example ACL: = acl blocked_content url_regex -i "/home/me/blocked_sites.txt" http_access deny blocked_content download all http_access deny blocked_content all http_reply_access deny blocked_content all = Contents of plain text file

Re: [squid-users] Re: Using LDAP Authentication with Windows 2003 Domain

2005-11-03 Thread D &amp; E Radel
An excellent walk-thru for ldap_auth and Active Directory: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory regards, D.Radel. - Original Message - From: "Adam Aube" <[EMAIL PROTECTED]> To: Sent: Friday, November 04, 2005 5:19 AM Subject: [squi

Re: [squid-users] Homepage Hijack

2005-11-02 Thread D &amp; E Radel
If you use a Windows Domain, you can set a Group Policy for all pcs that will dictate their homepage. This is for IE only, not other browsers though. Another option is group polcies or scripts on the clients. D.Radel. - Original Message - From: "Sam Lee" <[EMAIL PROTECTED]> To: Sent:

Re: [squid-users] Spam mail through Squid server

2005-10-25 Thread D &amp; E Radel
If that really is the case, how about blocking access to that "some server" and cancelling your customer's account? - Original Message - From: <[EMAIL PROTECTED]> To: Sent: Wednesday, October 26, 2005 9:36 AM Subject: [squid-users] Spam mail through Squid server Hi I am running tra

Re: [squid-users] Customized webpage for denied requests?

2005-10-14 Thread D &amp; E Radel
Rather than the standard page displayed with the email address of the cache administrator, is it possible to customize the page that is displayed? See deny_info and/or the FAQ. Regards Henrik Many thanks. :-) D.Radel.

[squid-users] Customized webpage for denied requests?

2005-10-13 Thread D &amp; E Radel
Rather than the standard page displayed with the email address of the cache administrator, is it possible to customize the page that is displayed? TIA, D.Radel.

Re: [squid-users] Which the best OS for Squid?

2005-10-11 Thread D &amp; E Radel
Thirdly, can someone PLEASE answer my question about setting "/" to 'noatime', as opposed to avoiding it by telling me how and why what I'm doing is stupid? Once again, are there pitfalls to having '/' set to 'noatime'? If your squid box is only used for Squid then there are *probably* no pi

Re: [squid-users] Performance tweaks

2005-10-10 Thread D &amp; E Radel
- Original Message - From: <[EMAIL PROTECTED]> To: Sent: Tuesday, October 11, 2005 9:56 AM Subject: Re: [squid-users] Performance tweaks Squid's url_regex is a hideously slow way of managing blackholed urls/sites/domains. I'm not necessarily blaming the program itself, the fact is,

Re: [squid-users] AD group changes don't get applied until restart of Squid -> Is this normal?

2005-10-06 Thread D &amp; E Radel
From: "Nathan Reeves" <[EMAIL PROTECTED]> To: Sent: Thursday, October 06, 2005 10:03 PM Subject: [squid-users] AD group changes don't get applied until restart of Squid -> Is this normal? Got NTLM authentication working fine with Stable11 on Windows 2003 Server STD. Just finding that when I

Re: [squid-users] Which the best OS for Squid?

2005-10-06 Thread D &amp; E Radel
- Original Message - From: "Askar" <[EMAIL PROTECTED]> To: "Bonnici Daniel" <[EMAIL PROTECTED]> Cc: Sent: Thursday, October 06, 2005 11:09 PM Subject: Re: [squid-users] Which the best OS for Squid? Bonnici Daniel wrote: Hi, which is the best linux OS for security and to run squid?

[squid-users] Intermittant "page cannot be displayed" problems

2005-09-19 Thread D &amp; E Radel
Hi there. Our users are complaining of intermittant squid problems. Browsers will show "page cannot be displayed" (e.g. for www.google.com) but hitting refresh, the page will be displayed ok. Everything was going alright for months, but now this problem. The only things I have done are add a

Re: [squid-users] Active Directory computer login restrictions stops Squid authentication for these users

2005-08-26 Thread D &amp; E Radel
From: "Serassio Guido" <[EMAIL PROTECTED]> To: "D & E Radel" <[EMAIL PROTECTED]>; Sent: Saturday, August 27, 2005 3:27 AM The easiest solution is not to restrict what computers our users can log into. But, I'd like to figure out if it's p

Re: [squid-users] Active Directory computer login restrictions stops Squid authentication for these users

2005-08-26 Thread D &amp; E Radel
useful with a limitde number of users and workstations. hope this helps. Quoting D & E Radel <[EMAIL PROTECTED]>: Hi there Squid is authenticating with no problems with our domain via LDAP. I wish to use the built-in Active Directory account option to restrict which computers a user on our d

[squid-users] Active Directory computer login restrictions stops Squid authentication for these users

2005-08-26 Thread D &amp; E Radel
Hi there Squid is authenticating with no problems with our domain via LDAP. I wish to use the built-in Active Directory account option to restrict which computers a user on our domain can log into (i.e. instead of being able to log into 'all computers', just their own). If I enable this setti

Re: [squid-users] windows 2003 server active directory authentication

2005-08-26 Thread D &amp; E Radel
The easy way is with LDAP: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory grol - Original Message - From: "Yong Bong Fong" <[EMAIL PROTECTED]> To: Sent: Friday, August 26, 2005 1:07 PM Subject: [squid-users] windows 2003 server active directo

Re: [squid-users] squid_ldap_group question

2005-07-14 Thread D &amp; E Radel
On our Domain I use: /usr/lib/squid/squid_ldap_group -R -b "dc=myorg,dc=org" -D "cn=Administrator,cn=Users,dc=myorg,dc=org" -w "mypassword" -f "(&(objectclass=person)(sAMAccountName=%v) (memberof=cn=%a,dc=myorg,dc=org))" -h 192.168.1.1` grol - Original Message - From: "Syed

Re: [squid-users] Can the MS Windows user-name be logged in access.log

2005-07-12 Thread D &amp; E Radel
i suppose it all depends on the size of the network and the patience of the users(!). ldap lookup would be fine for a small bunch of people, and you are right that its really quick to setup, especially if you are new to the whole squid thing. samba however, isn't all *that* hard to implement

Re: [squid-users] Can the MS Windows user-name be logged in access.log

2005-07-12 Thread D &amp; E Radel
ing without prompting? :-) --- On Mon 07/11, D & E Radel < [EMAIL PROTECTED] > wrote: From: D & E Radel [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED], squid-users@squid-cache.org Date: Tue, 12 Jul 2005 08:53:41 +1200 Subject: Re: [squid-users] Can the MS Windows user-name be logged in

Re: [squid-users] Can the MS Windows user-name be logged in access.log

2005-07-11 Thread D &amp; E Radel
> > yep. or add an authenticator using samba. lots of docs on that. > > john > I have seen something about samba beeing used to authenticate squid users, but have never tried anything like that in squid . Now I know it's possible I'l dig into it and see what posibilities there are. Thanks

[squid-users] FAQ? Outlook and Squid?

2005-07-10 Thread D &amp; E Radel
Greetings. Sorry if this is a recurring question. I checked through the Squid FAQ and didn't see anything on caching email. I have set our Outlook clients to use IE's LAN settings, however the proxy is not working for Outlook. I am guessing we need some email proxy system. What is the best no

Re: [squid-users] passport.com url error with Squid

2005-07-07 Thread D &amp; E Radel
Any takers? Does the url https://loginnet.passport.com/ppsecure/md5auth.srf?lc=1033 fail on anyones Squid using IE? Dietrich The url is passed to IE from clicking the check email link in MSN/Windows Messenger. Gets message invalid URL message from Squid. Typing it in, the site complains abou

Re: [squid-users] passport.com url error with Squid

2005-07-07 Thread D &amp; E Radel
- Original Message - From: "D & E Radel" <[EMAIL PROTECTED]> To: Sent: Tuesday, July 05, 2005 4:27 PM Subject: [squid-users] passport.com url error with Squid Hi there, There following url spits causes an error in Squid: https://loginnet.passport.com/pps

Re: [squid-users] Regarding Squid+Ldap

2005-07-06 Thread D &amp; E Radel
The easiest way to solve is to run the squid_ldap_auth program from commandline and see the results. Various things can cause it to fail, such as passwords with an ! in it, etc. D.Radel. - Original Message - From: "selvam" <[EMAIL PROTECTED]> To: Cc: <[EMAIL PROTECTED]> Sent: Wednes

Re: [squid-users] Squid with Active Directory

2005-07-06 Thread D &amp; E Radel
The easiest way to set up authentication with AD is: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory That webserver was down though earlier today. d.radel. - Original Message - From: "Abbas Salehi" <[EMAIL PROTECTED]> To: Sent: Wednesday, Jul

[squid-users] passport.com url error with Squid

2005-07-04 Thread D &amp; E Radel
Hi there, There following url spits causes an error in Squid: https://loginnet.passport.com/ppsecure/md5auth.srf?lc=1033 We get the following error message: ERROR The requested URL could not be retrieved --

Re: [squid-users] Authenticacion and AD

2005-06-14 Thread D &amp; E Radel
I tried with this guide but it still not work. Have you ever tried this? http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory An excellent guide. I tried it and it works with our AD setup. Using ldap_group took a while to debug and get working. You still

Re: [squid-users] Regarding Squid+Ldap

2005-05-25 Thread D &amp; E Radel
fi done Then go: echo "username password" | ./scriptname.sh Modify the script and re-run until you get it working. Saves alot of typing errors on the commandline. Probably not the most elegant way of writing the script, but it works for me. :-) regards Dietrich - Or

Re: [squid-users] Regarding Squid+Ldap

2005-05-25 Thread D &amp; E Radel
Hi You should probably comment out multiple attempts to authenticate. In your second attempt you have spelt "quest" as "qust". You also haven't specified an OU for the user "Manager", or a -f parameter. Try debugging at the commandline. eg: echo "username password" | /usr/lib/squid/squid_l

Re: [squid-users] How to get user informations from LDAP to squid

2005-05-18 Thread D &amp; E Radel
An excellent HOWTO guide: http://kb.papercutsoftware.com/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory Regards, Dietrich - Original Message - From: "Jiří Červenka" <[EMAIL PROTECTED]> To: Sent: Thursday, May 19, 2005 6:24 PM Subject: Re: [squid-users] How to get user informa

Re: [squid-users] Windows Automatic Update (WAU) and non-transparent squid proxy (was Re: [squid-users] Major malfunction: Squid and Windows Update)

2005-05-16 Thread D &amp; E Radel
I have just read about Windows Server Update Services which is seemingly a free service for Server 2003 and has a client for each XP machine. Not sure which is the best route to take though. SUS is a very good route in terms of bandwidth, allowing you to have local mirrors of windows update. Th

Re: [squid-users] Sarg Questions

2005-05-16 Thread D &amp; E Radel
From: "Ricardo López Urrutia" <[EMAIL PROTECTED]> Radel; Sarg doesn't run a Webserver, your server is the one running the Webserver and Sarg uses it to display the information collected from the logs. If you need further info about how to configure sarg sarg.conf will do the job,

[squid-users] Sarg Questions

2005-05-16 Thread D &amp; E Radel
Hi there. Can anyone point me in the direction of some decent Sarg info? The man page is minimal, as is the sarg website. I'd like to know more about how to configure it. I see it is running some kind of web-server on my machine after installing via Debian's apt-get, but would like to figure ou

[squid-users] localhost

2005-05-15 Thread D &amp; E Radel
Hi there. When a user types http://localhost/ in the web-browser, I presume that "localhost" to Squid means the IP address of the Squid server, not the IP address of the client. Is there a way to map "localhost" DNS requests in Squid back to the client pc so that they can still use the "localhos

Re: [squid-users] Virus question

2005-05-12 Thread D &amp; E Radel
From: "Ryan Lamberton" <[EMAIL PROTECTED]> Is there a good (free?) virus scanner that works with squid? One of my users must have a virus and my data provider keeps telling me that I have a beagle virus: Probably best to ensure that users have up-to-date anti-virus software installed on their w

Re: [squid-users] authentication / acl

2005-05-11 Thread D &amp; E Radel
From: "Chris Knipe" <[EMAIL PROTECTED]>: On Wed, May 11, 2005 at 02:02:12PM +0200, Chris Knipe wrote: # This is the main loop for authentication requests while () { ^ Either squid, or perl does not like this while (my $Input = ) { Works :) *yay* it only took me a day

Re: [squid-users] dns lookups

2005-05-11 Thread D &amp; E Radel
From: "Henrik Nordstrom": On Wed, 11 May 2005, D & E Radel wrote: I added the append_domain option in Squid. This worked, however not without problems. We have *two* domains with lengthy names. When using append_domain, it blindly adds the single domain suffix to any computer nam

Re: [squid-users] dns lookups

2005-05-11 Thread D &amp; E Radel
From: "Chris Robertson": If you are able to ping a domain-name-less box from the command line, but can't surf to it through Squid, then you should check your squid.conf for the dns_nameservers directive (make sure it's commented). Squid, by default will use the /etc/resolv.conf file to determine

Re: [squid-users] warez p2p client not working through squid

2005-05-11 Thread D &amp; E Radel
From: "dev singh" <[EMAIL PROTECTED]> Hi Dietrich, i hav checked these things but i m not getting solution for this. I hav checked with tcpdump also but it is working as port scanner , i m not getting the port on which it connects, i would be greatfull to u if u can get me the port of warez client

Re: [squid-users] authentication / acl

2005-05-11 Thread D &amp; E Radel
Hmmm ok Well I did add some debugging to my custom auth perl script via syslog... It never receives anything from squid to authenticate, and that's what debug tells me $_ is always empty as far as my script goes. This is definately something with my squid config that is not on par... -- Ch

Re: [squid-users] authentication / acl

2005-05-11 Thread D &amp; E Radel
From: "Chris Knipe" <[EMAIL PROTECTED]> Turned on some debugging... I am now seeing 2005/05/11 12:36:23| The request GET http://www.microsoft.com/ is DENIED, because it matched 'Authenticated' hmm... I'm reasonably new to squid, but I would've thought that "authenticated" would be a reserved word

Re: [squid-users] warez p2p client not working through squid

2005-05-11 Thread D &amp; E Radel
I m using squid 2.5 stable ,everything is working fine , but warez a p2p client is not working . what can be the issue . Help awaited , also i would be great if neone can tell me what port the warez client use to connect to server. Hi Dev You already did get a reply that would help last time you po

Re: [squid-users] authentication / acl

2005-05-11 Thread D &amp; E Radel
From: "Chris Knipe" <[EMAIL PROTECTED]> [EMAIL PROTECTED]:/usr/local/libexec/squid# /usr/local/libexec/squid/cenergy_auth OK^C Squid does start the perl childs to run the script. I am however doubting that Squid actually sends the requests off to the script - the scripts never queries anythin

Re: [squid-users] authentication / acl

2005-05-11 Thread D &amp; E Radel
From: "Chris Knipe" <[EMAIL PROTECTED]> I've written a custom authentication handler, which does seem to work. Reads from STDIN, Authenticates, and returns either OK or ERR on STDOUT back to squid. My next step, I want to allow a certain block of addresses http_acess, deny everyone else, but als

Re: [squid-users] dns lookups

2005-05-10 Thread D &amp; E Radel
From: "Kevin" <[EMAIL PROTECTED]> If you reconfigure squid using the "--disable-internal-dns" flag, recompile, and re-install, squid will go back to the old behavior of using "dnsserver" with the system resolver library (which obeys /etc/resolv.conf), instead of the embedded DNS code. This should a

Re: [squid-users] dns lookups

2005-05-10 Thread D &amp; E Radel
From: "Kevin" <[EMAIL PROTECTED]> On 5/10/05, D & E Radel <[EMAIL PROTECTED]> wrote: > This is a real n00b question. Sorry. Our squid setup is working nicely > and > DNS is being resolved nicely for internet domain names no problem. > However, > local

Re: [squid-users] no_cache or always_direct ?

2005-05-10 Thread D &amp; E Radel
From: "Matus UHLAR - fantomas" <[EMAIL PROTECTED]> On 10.05 17:02, D & E Radel wrote: We wish to cache all internet websites but not our local webservers. We have alot of students with their own webpages which are modified frequently and do not wish to run into problems with .

Re: [squid-users] dns lookups

2005-05-09 Thread D &amp; E Radel
Kevin Kadow wrote: Most people who follow this list will know what my automatic response is to this question...Proxy Automatic Configuration (PAC) scripting! http://www.squid-cache.org/Doc/FAQ/FAQ-5.html Ah.. excellent. Great idea. Are these names resolvable via a search suffix on an Intranet D

[squid-users] dns lookups

2005-05-09 Thread D &amp; E Radel
Hi there, This is a real n00b question. Sorry. Our squid setup is working nicely and DNS is being resolved nicely for internet domain names no problem. However, local computer names are not resolved with the squid server. eg: http://my-server/index.html will fail. Our system is a Windows 2003 d

[squid-users] no_cache or always_direct ?

2005-05-09 Thread D &amp; E Radel
Hello. We wish to cache all internet websites but not our local webservers. We have alot of students with their own webpages which are modified frequently and do not wish to run into problems with .asp and old versions of pages in the cache. Which is the better option: no_cache or always_direct

Re: [squid-users] Getting valid ip address thru browser

2005-05-09 Thread D &amp; E Radel
That is indeed strange. It shows my routers IP and not my local IP. Why are you using a website to determine your local IP? Maybe there is another solution to your problem. regards Dietrich - Original Message - From: "Rahul Sinha" <[EMAIL PROTECTED]> To: "D & E

Re: [squid-users]

2005-05-09 Thread D &amp; E Radel
How many of these tests will you send us? All your posts have arrived: http://marc.theaimsgroup.com/?l=squid-users&r=1&b=200505&w=2 I have found that *gmail* and the squid mailing lists are *not* a good match. Your posts have indeed been received by the list, but they never seem to arrive at the

  1   2   >