[squid-users] Expect Request headers

2011-01-20 Thread Rolf Loudon
Hello I have some software that is producing repeated TCP_MISS/417 errors in the logs and is failing to connect to the server I have found previous discussions that show the software is not behaving correctly to the extent that after the proxy sends back the 417 - expectation failed, the

[squid-users] Expect Request headers

2011-01-20 Thread Rolf Loudon
Hello I have some software that is producing repeated TCP_MISS/417 errors in the logs and is failing to connect to the server I have found previous discussions that show the software is not behaving correctly to the extent that after the proxy sends back the 417 - expectation failed, the

[squid-users] matching a user agent with regex

2010-11-14 Thread Rolf Loudon
hello I've been trying and failing to match the user agent string for the browser acl type. I would appreciate any help. I don't know exactly what squid sees as the user agent but a capture of the traffic shows the user agent header and I'm basing it on what I see there. The complicating

[squid-users] Kerberos auth with Active Directory.

2010-11-01 Thread Rolf Loudon
hello I am trying to setup kerberos auth against Active Directory - Windows 2000 - in squid, 2.7. This is primarily so that the username is captured in the access log. But also user based access control will occasionally be used. I've installed the squid_kerb_auth software from

Re: [squid-users] NTLM Auth for workstation not users

2008-12-04 Thread Rolf Loudon
Hello We do authentication by user and by workstation. Our business rules dictate a scenario like yours, where certain users gets access excepting certain workstations where any user is able to gain access, and several variations. In Active Directory we have user groups and workstation

[squid-users] re: ACL ordering problem

2008-05-18 Thread Rolf Loudon
Hello Thanks to Amos for this. Upon closer inspection of squid.conf I discovered a stray http_reply_access directive which I was using against a rep_mime_type construct, had found its way into an acl that related to one I was using in the original problem.My mistake. Using the

[squid-users] ACL ordering problem

2008-05-06 Thread Rolf Loudon
hello I cannot seem to get an ACL sequence to work as I expect it to (using 2.6stable9). I have right at the start of the config: acl authenticated_user proxy_auth REQUIRED then acl no_auth_unrestricted dstdomain /usr/local/squid/ no_authentication_required http_access allow

[squid-users] authenticate using ldap to AD for hostnames

2007-12-18 Thread Rolf Loudon
hi I have used for many years auth for squid by looking up user/pass and group membership against Active Directory. I have found that I can place into AD groups, hostnames. The object type of computers as AD describes it. querying the directory with cn=somehostname returns the group as

[squid-users] controlling the rate of auto-refresh websites

2007-10-08 Thread Rolf Loudon
hello As best as I can explain it, many sites, typically newspaper or media outlets auto refresh after a certain time. I presume that the code meta http-equiv=Refresh content=0300 / which I've taken from a particular site is the entry that causes it to happen. This means that users

[squid-users] auth using Active Directory broken since various Microsoft patches.

2007-07-18 Thread Rolf Loudon
hello Firstly I apologise for this being quite a long post as I've included some wire sniffed traffic hoping it may help with any diagnosis you might be able to offer. I have been using without issue, basic authentication for web browsers using Active Directory as the authentication