Greetz,
I have a large list of users that I currently maintain in the squid.conf
file as part of an ACL. Can these entries be kept in an external file
and included in squid.conf, somehow?
--
Darren Spruell
Sento I.S. Department
[EMAIL PROTECTED]
squid's native's acl functions to set up the desired access
control. The example config file should give you an idea of what options
to set in the comments.
--
Darren Spruell
Sento I.S. Department
[EMAIL PROTECTED]
Eric Geater 12/12/03 wrote:
I need to block an IP address. So far I've read that I can't enter it
into my dstdomain acl because it's not a FQDN. Fine, but the "dst" ACL
type expects an IP address AND subnet mask, which isn't used for web
addresses. Anyone who can clarify this for me would be a h
to Henrik for referring us to this enlightening knowledge.
--
Darren Spruell
Sento I.S. Department
[EMAIL PROTECTED]
Is it possible to use more than one redirector program at a time with
squid? We would like to use squidGuard for access control and also use
another redirector for antivirus scanning.
If not, what is a good setup to accomplish this?
TIA
DS
ight make them differently.
We do suspect that the number of file descriptors (1024) is too small
for this cache's load and would like to set it higher. Might this cause
the errors we are seeing?
More detailed logs are available at the following URL:
http://ganymede.sento.com/squidlogs/cache.log
--
Darren Spruell
Darren Spruell wrote:
[...]
It seems that every hour when we reload the cache, that error conditions
occur on this second proxy. Here are entries from cache.log during one
such occurance:
2004/04/10 13:01:01| Restarting Squid Cache (version 2.5.STABLE4)...
2004/04/10 13:01:01| FD 31 Closing
1024 range, is
it reccomended to raise the FD max to a higher number? And would
defaulting this number to 2048 or 4096 put excessive unneeded strain on
system resources if the value was too high after all?
TIA
--
Darren Spruell
a correct number of redirector instances started (e.g., is 20
squidGuard processes overkill for my proxy?), file descriptors to
allocate, disk/memory space/cache configuration/etc.
TIA
--
Darren Spruell
You could write a script
to analyze the contents of this file at the end of your day once enabled...
--
Darren Spruell
://blah.com is DENIED because, it matched
'AuthorizedUsers'
When this happened during our setup, it was because the squid user did
not have access to winbind's privileged pipe.
--
Darren Spruell
Jim_Brouse/[EMAIL PROTECTED] wrote:
I thought that the user was the user who was logged on the AD domian?
How can I confirm what user is trying to access winbind's privileged pipe
is that user basically just squid?
Yeah, here's the setup of our installation:
$ ls -ld /var/cache/samba/winbindd_pri
authentication. Here's some of our config:
auth_param ntlm program /usr/bin/ntlm_auth \
--helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 20
auth_param ntlm max_challenge_reuses 0
auth_param ntlm max_challenge_lifetime 2 minutes
--
Darren Spruell
Sento I.S. Department
[
1 and it's been good for a few months now. OpenBSD 3.3-stable.
Here are some settings from my squid.conf:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
--
Darren Spruell
Sento I.S. Department
[EMAIL PROTECTED]
can't view the page - no login
prompt. Is this also related to the NTLM authentication not being
supported, or is there a way we can make it so that users are still
given the login prompt?
TIA
--
Darren Spruell
Sento I.S. Department
[EMAIL PROTECTED]
15 matches
Mail list logo