Re: [squid-users] syntax to test ldap groups?

2005-11-07 Thread Derrick MacPherson
Just following up on this, all is working except I'm not sure what I need for syntax in referring to an AD group with a space in the name, i've tried: Internet Access 'Internet Access' `Internet Access` Internet%20Access all without working and "Internet Access" refers to an external file. Wha

[squid-users] syntax to test ldap groups?

2005-11-04 Thread Derrick MacPherson
whats the syntax to test lookups for groups on squid_ldap_group? thanks.

Re: [squid-users] simple acl question

2005-11-03 Thread Derrick MacPherson
On Thu, 2005-11-03 at 14:31 -0800, Derrick MacPherson wrote: > I have: > acl AuthorizedUsers proxy_auth REQUIRED > http_access allow AuthorizedUsers > > If I want to no authorization requested from the allowed_hosts but they Insert have after the word no in there. Sheesh > can

[squid-users] simple acl question

2005-11-03 Thread Derrick MacPherson
I have: acl AuthorizedUsers proxy_auth REQUIRED http_access allow AuthorizedUsers If I want to no authorization requested from the allowed_hosts but they can still access, can it be done with something like: acl allowed_hosts src "/root/allowed_hosts" http_access allow allowed_hosts acl Authorize

RE: [squid-users] Re: Using LDAP Authentication with Windows 2003 Domain

2005-11-03 Thread Derrick MacPherson
Is there an advantage to using LDAP and not using ntlm_auth?

Re: [squid-users] proxy placement.

2005-10-20 Thread Derrick MacPherson
On Thu, 2005-10-20 at 20:16 +0200, Christoph Haas wrote: > On Thursday 20 October 2005 19:04, Derrick MacPherson wrote: > > I've gotten my authentication working as I want in my test environment, > > I'm now looking to put my squid box into our production environment. I

[squid-users] proxy placement.

2005-10-20 Thread Derrick MacPherson
I've gotten my authentication working as I want in my test environment, I'm now looking to put my squid box into our production environment. I am wondering if I can get some suggestions; what I was thinking of doing is putting 3 nics in the box, one with an IP on the lan, the other 2 in a bridge th

Re: [squid-users] Clarification?

2005-09-28 Thread Derrick MacPherson
On Thu, 2005-09-29 at 01:45 +0200, Henrik Nordstrom wrote: > On Wed, 28 Sep 2005, Derrick MacPherson wrote: > > > OK. If I'm getting Windows machine popping up an authentication > > challenge up, it's asking username, password, domain; what is not > > working

Re: [squid-users] Clarification?

2005-09-28 Thread Derrick MacPherson
On Thu, 2005-09-29 at 00:57 +0200, Henrik Nordstrom wrote: > > On Wed, 28 Sep 2005, Derrick MacPherson wrote: > > > To get authentication to work so that Windows clients don't have to put > > their username and password in, I'd need to use version 2.5, right

[squid-users] Clarification?

2005-09-28 Thread Derrick MacPherson
To get authentication to work so that Windows clients don't have to put their username and password in, I'd need to use version 2.5, right, or wrong? Sorry if this is off, I've frown a little confused in my readings.

Re: [squid-users] Freebsd testing with squid. User authentication works, now trying to get group based auth.

2005-08-05 Thread Derrick MacPherson
On Fri, 2005-08-05 at 19:03 +0200, Henrik Nordstrom wrote: > On Thu, 28 Jul 2005, Derrick MacPherson wrote: > > > Whats wrong with this? > > > > ./wbinfo_group.pl > > dmacpherson eng > > Got dmacpherson eng from squid > > User: -dmacpherson- > &

Re: [squid-users] freebsd and squid - samba 2 or 3?

2005-08-05 Thread Derrick MacPherson
On Fri, 2005-08-05 at 13:44 +0200, Henrik Nordstrom wrote: > On Wed, 3 Aug 2005, Derrick MacPherson wrote: > > > Am I better of with samba 2 or 3? > > Defenitely Samba-3. Samba-2 is considered end-of-life by the Samba > developers and no longer maintained, not even se

[squid-users] freebsd and squid - samba 2 or 3?

2005-08-03 Thread Derrick MacPherson
Am I better of with samba 2 or 3? I want to auth to w2k server and only allow out members of one group. I'm having problems getthing it working with samba3, and wondering if i should change. I've been playing with the config a lot and have gotten non IE browsers working with: auth_param basic prog

Re: [squid-users] Freebsd testing with squid. User authentication works, now trying to get group based auth.

2005-07-28 Thread Derrick MacPherson
- Sending ERR to squid On Thu, 2005-07-28 at 11:15 -0700, Derrick MacPherson wrote: > as the subject says, when I try to test group auth, I get: > > /usr/local/libexec/squid/wb_group -d > /wb_group[19095](wb_check_group.c:344): External ACL winbindd group > helper build Jul 27

[squid-users] Freebsd testing with squid. User authentication works, now trying to get group based auth.

2005-07-28 Thread Derrick MacPherson
as the subject says, when I try to test group auth, I get: /usr/local/libexec/squid/wb_group -d /wb_group[19095](wb_check_group.c:344): External ACL winbindd group helper build Jul 27 2005, 17:33:37 starting up... /wb_group[19095](wb_check_group.c:308): Can't contact winbindd. Dying proxy1# ps -a

[squid-users] preferred method for authentication?

2005-07-27 Thread Derrick MacPherson
we have a w2k and nis authentication on our network, our Pix uses RADIUS to talk to the w2k to access the net, we are wanting to put a box with squid on it to proxy and cache; my question is what would be the preferred method to authenticate? I've been doing some digging and am not sure if I should

[squid-users] Possible to use squid in just logging mode?

2005-07-20 Thread Derrick MacPherson
I'm wondering if it's possible to use squid in just a logging mode, where we could analyze the logs after several weeks and see what amount caching would help us? Make sense?